update privilege for a employee