add privilege functions