A shared account is an account used by more than one person. Because activity cannot be directly attributed to a single individual, shared accounts weaken accountability and complicate authentication, review and offboarding.
Organizations should replace shared accounts with named identities where possible. If one is unavoidable, use approved ownership, PAM-controlled access, strong session logging, credential rotation and periodic review.