These accounts simply do not have the power to perform administrative tasks directly, and they do not have the ability to lift a single confirmation: they instead require credentials, such as a password or a card chip. This is requested through a prompt to the user.

This is known informally as the way Over-the-shoulder (where someone can look over the shoulder of the user to type a password and a job approval)