config the privilege