update privilege assignment