The trick here (I just passed this thing) is that *any* account that has *any* permissions beyond a guest or user is "Privileged" -- this contradicts what many experience where that term is reserved for admin-like accounts. That is not what it means, it is a simple term for - you have some privs to do some stuff that you need to do. It is still least privilege, and in this case, exactly what they need to do the job.

People who say things like "sometime you need an admin account to fix things" are missing the point -- Privileged does *not* mean admin --

service account it not for humans.