previleges on config