A service process is a running application and the operating-system account or security context it uses. That context determines which files, devices, and other system resources the application can access. A service running with limited permissions has less ability to affect the host than one running with administrator or root privileges.
In cyber security, this context helps define the impact of a vulnerability. If an attacker exploits a flaw to execute code in a media server’s service process, the attacker initially gains the permissions available to that process-not automatically full control of the system. Defenders should run services with only the access they need, keep them patched, and review their accounts and permissions. After suspected exploitation, investigate the host and the resources the service account could reach.