How-to: privileges required for various Workspace operations