managing privileges