A low-privileged account is a user or service account with limited permissions. It may only be allowed to view certain data, access a narrow set of functions, or run specific tasks, while being blocked from full administrative control.
These accounts matter in cyber security because limited does not mean harmless. Attackers often target them to collect internal information, map systems, or use the account as a stepping stone toward higher-value privileges. In a management console or other centralized system, even read-only or restricted access can expose device names, policy details, logs, or operational workflows that help an intrusion progress.
Defenders reduce risk by applying least privilege, removing unnecessary access, isolating management interfaces, and monitoring for unusual use of accounts that should have a small footprint. If a low-privileged login path can be reached remotely or via static credentials, it can become an entry point worth patching quickly.