update cluster-wide admin privileges section