Privileges boilerplate