process to gain control of computer privileges that are not allowed to a user or application by default