Global user rights API

Relies on I139c43e5 in core

Bug: 71495
Change-Id: I6e5015691e73677b9e123d20a643cba127d4241e