Privilege control is the set of rules that limits what a user, application, or background process can do on a system. It answers basic questions such as: can this account install software, read sensitive files, change settings, or access other users’ data? In security, the goal is to give each identity only the minimum access needed to do its job, which is the principle of least privilege.
This matters because many attacks become much more damaging after an initial compromise. If malware lands on a workstation but the user has limited rights, the attacker may be blocked from disabling defenses, stealing broader data, or spreading to other systems. Good privilege control helps defenders contain errors, reduce insider risk, and separate everyday work from administration. It is usually enforced with user roles, access control lists, sudo or administrator prompts, and application sandboxing.