Privileged user
Someone who can change or sidestep security controls. Developers who can bypass a guardrail count.
A privileged user can alter or walk around a system's security measures: configuration, account rights, audit logs, data, or applications. Limited-rights developers who can still bypass a control belong in the same bucket.
Separate the privileged account from the everyday mailbox. MFA, just-in-time elevation, a Privileged Access Workstation where it is warranted, and logs that somebody reads.
If the helpdesk can reset a domain admin without a second check, you have a privileged user you have not named.
Fact source: ASD's ACSC glossary.
