access privilege

In computer networking, authorized access to files and other shared resources. The ability to authorize or restrict access selectively to files or directories, including separate privileges such as reading, writing, or changing data, is a key element in computer security systems. This kind of system ensures that, for example, a company's employees cannot read its personnel files or alter payroll data unless they work for the appropriate departments, or that freelance or temporary staff can be given access to some areas of the computer system but not others. Access privileges may also exist for shared printers and devices such as tape drives and modems.

Certain types of restrictions may be applied by users themselves to files on their own desktop machines, such as private e-mail; others may be granted only by the system administrator.

On all client–server systems, all data, even private e-mail and personal letters, can be accessed by the system administrator, who needs system-wide privileges in order to manage the network properly. Data which is encrypted, however, will not be readable unless the system administrator knows the user's individual password.

The privacy of employee e-mail is a contentious issue, as many employees assume their e-mail is private, while many companies presume ownership of all data stored on company systems.