BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

AC-06(05) Privileged Accounts

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged AC Moderate baselineHigh baseline part of AC-6

Title

Privileged Accounts

Control

Restrict privileged accounts on the system to [Assignment: personnel or roles].

Discussion

Privileged accounts, including super user accounts, are typically described as system administrator for various types of commercial off-the-shelf operating systems. Restricting privileged accounts to specific personnel or roles prevents day-to-day users from accessing privileged information or privileged functions. Organizations may differentiate in the application of restricting privileged accounts between allowed privileges for local accounts and for domain accounts provided that they retain the ability to control system configurations for key parameters and as otherwise necessary to sufficiently mitigate risk.

Parameters

ac-06.05_odp: personnel or roles

Related controls

ia-2, ma-3, ma-4

Assessment objective

AC-06(05) privileged accounts on the system are restricted to [Assignment: personnel or roles].

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).