One who has authorized access to information on a computer and other organizational and constituent information assets. The authorization may include the ability to access, add, or modify the information asset(s).