basics for privilege management