Someone with Administrative Privileges basically has all the powers needed
to administer the computer.
There (initially) is 1 built-in account named "Administrator" that has that
capability.
The person that can use that account is also capable (from a OS point of
view) to define other user accounts and grant them the same privileges, ie.
he/she can define other administrators. This is done throug making those
other user accounts a member of the group named "Administrators".
hth