Add privileges to APIs