Implement service side of privileges mapping