can now add privileges