Someone using the authorization code, usually user ID and password of another person to secure access to network resources for which he or she does not have privileges or authorization. Can be intentional or not. CFR 21 Part 11 mandates technical controls that prevent this.