View source for How do administrative privileges work?

== How do administrative privileges work? ==
As well as the files that you create, your computer has a number of files which are needed by the system for it to work properly. If these important system files are changed improperly they can cause various things to break, so they are protected from changes by default. Certain applications also modify important parts of the system, and so are also protected.

The way that they are protected is by only allowing users with administrative privileges to change the files or use the applications. In day-to-day use, you won't need to change any system files or use these applications, so by default you do not have admin privileges.

Sometimes you need to use these applications, so you may be able to temporarily get admin privileges to allow you to make the changes. If an application needs admin privileges, it will ask for your password. For example, if you want to install some new software, the software installer (package manager) will ask for your admin password so it can add the new application to the system. Once it has finished, your admin privileges will be taken away again.

Admin privileges are associated with your user account. Some users are allowed to have admin privileges and some are not. Without admin privileges you will not be able to install software. Some user accounts (for example, the "root" account) have permanent admin privileges. You shouldn't use admin privileges all of the time, because you might accidentally change something you did not intend to (like delete a needed system file, for example).

In summary, admin privileges allow you to change important parts of your system when needed, but prevent you from doing it accidentally.

What does "super user" mean?

A user with admin privileges is sometimes called a super user. This is simply because that user has more privileges than normal users. You might see people discussing things like su and sudo; these are programs for temporarily giving you "super user" (admin) privileges.

=== Why are admin privileges useful? ===
Requiring users to have admin privileges before important system changes are made is useful because it helps to prevent your system from being broken, intentionally or unintentionally. If you had admin privileges all of the time, you might accidentally change an important file, or run an application which changes something important by mistake. Only getting admin privileges temporarily, when you need them, reduces the risk of these mistakes happening. Only certain trusted users should be allowed to have admin privileges. This prevents other users from messing with the computer and doing things like uninstalling applications that you need, installing applications that you don't want, or changing important files. This is useful from a security standpoint.