Privileged Accounts

User or service accounts that have elevated rights or administrative privileges on systems. Examples include IT admin accounts, accounts with domain-wide permissions, or even a user account with full access to sensitive financial data. Because these accounts can make big changes (install software, change configurations, access all data, etc.), they are high-value targets for attackers.

‍

Managing privileged accounts means keeping their number limited, using strong MFA for them, and monitoring their use.

‍

Small businesses often have just a few privileged accounts (like the Office 365 global admin or the router login); it's wise to closely guard these (don't use them for daily work, change their passwords often, and disable any default "admin" accounts that came with your systems).

‍

In short, privileged accounts are "keys to the kingdom," and they require extra protection and oversight.