Whether these are less privileges or more privileges than that of the original service account depends entirely on which client connects/authenticates.
所持权限高于或低于原始权限全取决于哪个客户端在连接/验证。