Multi-level privileges for user access