Which privilege must the user be granted?