[dba-Tech] Detrude?

[Gustav Brock]

Hi Stuart

Oh, those links make good sense as they are about elevating the "privileges of a user account", not the user account as such. Also, the elevated privileges are temporary - to carry out a task, even for an admin account - which means there will be no de-elevating to take hand of, as that will happen automatically.

So, I had got it wrong. You don't elevate a user account; you elevate the privileges of a user account.
That's different from promoting or demoting a user account.

Thanks for the clarification.

/gustav

-----Oprindelig meddelelse-----
Fra: dba-Tech <dba-tech-bounces+gustav=cactus.dk at databaseadvisors.com> På vegne af Stuart McLachlan
Sendt: 6. december 2021 09:23
Til: Discussion of Hardware and Software issues <dba-tech at databaseadvisors.com>
Emne: Re: [dba-Tech] Detrude?

The problem is that Microsoft like the word "elevate" so it's in common use and people generally know exactly what you mean.

Typically:
https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/elevated-privileges-in-sh
arepoint-add-ins

https://docs.microsoft.com/en-us/windows/win32/msi/installing-a-package-with-elevated-privi
leges-for-a-non-admin

https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/
user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval
-mode

https://docs.microsoft.com/en-us/power-platform/admin/prevent-elevation-security-role-privil
ege

And many, many more....



On 6 Dec 2021 at 7:39, Gustav Brock via dba-Tech wrote:

> Perhaps it would be better to skip "elevate" (which sounds a bit 
> "physical" to me) and, instead, talk about promoting and demoting user 
> accounts. I found one reference:
> 
> https://www.top-password.com/blog/how-to-promote-a-standard-user-account-to-administrator-without-logging-in-to-windows/
> 
> You wouldn't, I guess, not even temporarily, elevate an employee but rather promote him/her.
> 
> Am I right?
> 
> /gustav