what are the privileges granted to connect role