answersLogoWhite

0

As the question was posed in the Windows section, I'll answer this from Microsoft's perspective.

User rights generally refer to logon capabilities: who can logon interactively, as a batch job, as a service, over the network, over Terminal Services, etc. These all require a certain "right" and these rights can also be denied to groups or individual users.

Permissions relate to the capability of accessing an object, such as a file, a registry entry, a service, a printer, a share, etc. Again these can be granted or denied but there is more granularity here as there are several permission types: read, write, delete, etc. Permissions are collected into Access Control Lists (ACLs) with each entry being termed an Access Control Entry (ACE).

To complete the trio in common parlance, there are privileges. These relate to overriding capabilties within Windows such as backup, restore, take ownership, debug, etc. If you hold the backup privilege, for example, you are allowed to read all files, regardless of permissions on those files. Privileges trump permissions.

Confusingly, privileges are sometimes referred to as rights, even in official MS documentation. in the days of NT4, some were also called "abilties" so you'll note the careful use of the generic term, "capability" above.

And finally, in the Novell world, permissions are called user rights.

User Avatar

Wiki User

15y ago

What else can I help you with?

Related Questions

Difference between grant and revoke statements in sql?

grant will give permission to the user on database by using revoke we can remove the permission


What is the difference between Software Installer and Windows Installer?

The former has fewer privileges and will probably require user intervention. Plus, it uses .zap files.


What is the difference between a standard user account and an administrator account?

Guest account is the one where you can set a settings that you need..... For ex. You don't like any1 uninstalling your programs, so in such cases you can use guest account.... In order to activate guest account you have to have a administrator account & it has to be set with a password........ Administration account is normal to control your settings.............


In windows 2000xp what has rights and permission to all computer software and hardware resources and is responsible for setting up other user accounts and assigning them privileges?

administrator


What is the difference between end-user systems and organizational systems?

the difference between end user system and organisational system


What is the difference between a role and a privilege?

A role defines the responsibilities and access levels a user has within a system or organization, while a privilege is a specific permission granted within that role to perform certain actions or access certain resources. Roles set the broader scope of authority, while privileges provide granular control over what actions can be taken within that role.


What is the difference between an employing and user organisation?

exlain the differnce between an employing and user organisation


What is the purpose of the SUID permission?

The SUID (Set User ID) permission allows a user to execute a file with the privileges of the file's owner, rather than the privileges of the user who is running the file. This is particularly useful for programs that require elevated permissions to perform certain tasks, such as changing system settings or accessing restricted files. However, it also presents security risks, as malicious users could exploit SUID binaries to gain unauthorized access to system resources. Therefore, SUID should be used judiciously and monitored closely.


What is the difference between all user profile and default user profile?

registry


What is an authorized user and what privileges do they have?

An authorized user is someone who is given permission to use a credit card account by the primary cardholder. Authorized users can make purchases with the card, but they are not responsible for paying the bill. They do not have the ability to make changes to the account or request account information.


Who establishes new permission privileges for current users in JPAS?

In the Joint Personnel Adjudication System (JPAS), new permission privileges for current users are typically established by the organization’s designated security officer or administrator. This individual is responsible for managing user access and ensuring compliance with security policies. Changes to permissions may also be guided by relevant regulations and organizational requirements.


What option must a user have to grand another user privileges on an object not owner by the user?

admin option