Identity Privilege
Identity privilege is the security significance of elevated access an identity holds—admin rights, broad roles, or sensitive scopes—that amplifies blast radius when that identity is compromised or misused.
Identity Privilege
Definition
Identity privilege is the security significance of elevated access an identity holds—administrative rights, broad roles, delegated permissions, or sensitive scopes—that amplifies blast radius when that identity is compromised, misused, or investigated as a pivot.
Privilege reflects what an identity can reach, not merely its label in a directory. The same credential event on a standard user and a domain administrator is not the same decision.
SentriScope Usage
SentriScope enriches canonical identities with privilege and access context (KID-ARC-0001) so prioritization, attack paths, and investigations can explain why identity-related findings rank differently. This entry defines the term only.
Related terms
- Identity —
KID-GLS-0010 - Blast Radius —
KID-GLS-0022 - Security Context —
KID-GLS-0003