Discretionary Access Control (DAC) allows various users delegated control over system resources. DAC is the access control commonly found in personal computing. Under DAC, creators of files may assign whatever rights they wish to other users to copy, view, share, or modify the files. Likewise, anyone with an administrator account may create other accounts, elevate privileges, allow system modifications, or install executables.
DAC contrasts with Mandatory Access Control (MAC).