privilege-criteria-configuration