A legitimate user is one who has access to a system and is supposed to have access to the system, according the system's owner or admistrator.