specific privilege for user on workspace