split privileges