A right that, when granted to an entity, permits the entity access and/or authorization to an otherwise restricted object, state, or resource. Note: Privileges represent the authorized behavior of a subject. They are defined by an authority and embodied in policy or rules.
Sources:
CNSSI 4009-2022
from
NIST SP 800-162 - adapted
NIST SP 1800-27B
under Privilege
from
CNSSI 4009-2022
NIST SP 1800-27C
under Privilege
from
CNSSI 4009-2022
NIST SP 800-12 Rev. 1
under Privilege
from
CNSSI 4009
The authorized behavior of a subject.
Sources:
NIST SP 800-162
A special authorization that is granted to particular users to perform security relevant operations.
Sources:
NISTIR 5153
under Privilege