or are there extra privs I can grant to that role