| Name | 
	      Action URI | 
	      Description | 
	      Protects Function | 
	    
	      | add-query-rolesets | 
	      http://marklogic.com/xdmp/privileges/add-query-rolesets | 
	      privilege to add query rolesets | 
	      sec:add-query-rolesets | 
	    
	      | admin-database | 
	      http://marklogic.com/xdmp/privileges/admin/database | 
	      privilege to administer databases | 
	      admin built-ins | 
	    
	      | admin-default-read | 
	      http://marklogic.com/xdmp/privileges/admin-default-read | 
	      internal privilege to use the Admin API for reading configuration information | 
	      admin built-ins | 
	    
	      | admin-forest | 
	      http://marklogic.com/xdmp/privileges/admin/forest | 
	      privilege to administer forests | 
	      admin built-ins | 
	    
	      | admin-host | 
	      http://marklogic.com/xdmp/privileges/admin/host | 
	      privilege to administer hosts | 
	      admin built-ins | 
	    
	      | admin-app-server | 
	      http://marklogic.com/xdmp/privileges/admin/app-server | 
	      privilege to administer app-servers | 
	      admin built-ins | 
	    
	      | admin-app-server-security | 
	      http://marklogic.com/xdmp/privileges/admin/app-server-security | 
	      privilege to administer app-servers' security | 
	      admin built-ins | 
	    
	      | admin-group | 
	      http://marklogic.com/xdmp/privileges/admin/group | 
	      privilege to administer groups | 
	      admin built-ins | 
	    
	      | admin-group-security | 
	      http://marklogic.com/xdmp/privileges/admin/group-security | 
	      privilege to administer groups' security | 
	      admin built-ins | 
	    
	      | admin-cluster | 
	      http://marklogic.com/xdmp/privileges/admin/cluster | 
	      privilege to administer clusters | 
	      admin built-ins | 
	    
	      | admin-mimetype | 
	      http://marklogic.com/xdmp/privileges/admin/mimetypes | 
	      privilege to administer mimetypes | 
	      admin built-ins | 
	    
	      | admin-module-read | 
	      http://marklogic.com/xdmp/privileges/admin-module-read | 
	      privilege to use the Admin API for reading configuration information | 
	      admin built-ins | 
	    
	      | admin-module-write | 
	      http://marklogic.com/xdmp/privileges/admin-module-write | 
	      privilege to use the Admin API for writing configuration information | 
	      admin built-ins | 
	    
	      | admin-ui | 
	      http://marklogic.com/xdmp/privileges/admin-ui | 
	      privilege to view the Admin Interface, but not to make changes | 
	      admin built-ins | 
	    
	      | amp-add-roles | 
	      http://marklogic.com/xdmp/privileges/amp-add-roles | 
	      privilege to assign additional roles to the amp | 
	      sec:amp-add-roles | 
	    
	      | amp-change-database | 
	      http://marklogic.com/xdmp/privileges/amp-change-database | 
	      privilege to assign additional roles to the amp | 
	      sec:amps-change-modules-database | 
	    
	      | amp-get-roles | 
	      http://marklogic.com/xdmp/privileges/amp-get-roles | 
	      privilege to get the roles associated with the amp | 
	      sec:amp-get-roles | 
	    
	      | amp-remove-roles | 
	      http://marklogic.com/xdmp/privileges/amp-remove-roles | 
	      privilege to remove roles assigned to the amp | 
	      sec:amp-remove-roles | 
	    
	      | amp-set-roles | 
	      http://marklogic.com/xdmp/privileges/amp-set-roles | 
	      privilege to set the roles associated with the amp | 
	      sec-amp-set-roles | 
	    
	      | any-collection | 
	      http://marklogic.com/xdmp/privileges/any-collection | 
	      privilege to add to or remove from any collection, regardless of whether it is protected | 
	      xdmp:document-add-collections,
xdmp:document-remove-collections,
xdmp:document-set-collections | 
	    
	      | any-transaction-locks | 
	      http://marklogic.com/xdmp/privileges/any-transaction-locks | 
	      privilege to see URIs currently locked for read or write by a transaction. | 
	      xdmp:transaction-locks | 
	    
	      | any-uri | 
	      http://marklogic.com/xdmp/privileges/any-uri | 
	      privilege to create a document with any uri, regardless of whether the uri is protected | 
	      xdmp:document-insert,
xdmp:document-load,
xdmp:load  | 
	    
	      | app-builder | 
	      http://marklogic.com/xdmp/privileges/app-builder | 
	      privilege to use the Application Builder UI
App Builder is no longer part of MarkLogic | 
	       | 
	    
	      | appservices-cache-server-fields | 
	      http://marklogic.com/xdmp/privileges/appservices-cache-server-fields | 
	       | 
	       | 
	    
	      | cancel-any-requests | 
	      http://marklogic.com/xdmp/privileges/cancel-any-requests | 
	      privilege to cancel requests issued by any user attempting to cancel a request | 
	      admin built-ins | 
	    
	      | cancel-my-requests | 
	      http://marklogic.com/xdmp/privileges/cancel-my-requests | 
	      privilege to cancel requests issued by the user attempting to cancel a request | 
	      admin built-ins | 
	    
	      | clang:read | 
	      http://marklogic.com/xdmp/privileges/custom-language-read | 
	      privilege to read custom language configuration specifications | 
	      clang:language-config-read | 
	    
	      | clang:write | 
	      http://marklogic.com/xdmp/privileges/custom-language-write | 
	      privilege to write custom language configuration specifications | 
	      clang:language-config-write | 
	    
	      | collection-add-permissions | 
	      http://marklogic.com/xdmp/privileges/collection-add-permissions | 
	      privilege to add permissions to a collection | 
	      sec:get-collections,
sec:collection-add-permissions | 
	    
	      | collection-get-permissions | 
	      http://marklogic.com/xdmp/privileges/collection-get-permissions | 
	      privilege to get permissions on a collection | 
	      sec:collection-get-permissions | 
	    
	      | collection-remove-permissions | 
	      http://marklogic.com/xdmp/privileges/collection-remove-permissions | 
	      privilege to remove permissions from a collection | 
	      sec:get-collections,
sec:collection-remove-permissions | 
	    
	      | collection-set-permissions | 
	      http://marklogic.com/xdmp/privileges/collection-set-permissions | 
	      privilege to set permissions on a collection | 
	      sec:get-collections,
sec:collection-set-permissions | 
	    
	      | compartment-get-roles | 
	      http://marklogic.com/xdmp/privileges/compartment-get-roles | 
	      privilege to get roles on a compartment | 
	      sec:compartment-get-roles | 
	    
	      | complete-any-transactions | 
	      http://marklogic.com/xdmp/privileges/complete-any-transactions | 
	      privilege to use transaction built-ins for any transactions | 
	      xdmp:transaction-commit,
xdmp:xa-complete | 
	    
	      | complete-my-transactions | 
	      http://marklogic.com/xdmp/privileges/complete-my-transactions | 
	      privilege to use transaction built-ins for transactions started by the current user | 
	      xdmp:transaction-commit,
xdmp:xa-complete | 
	    
	      | count-builtins | 
	      http://marklogic.com/xdmp/privileges/counts | 
	      privilege to run xdmp:forest-counts | 
	      xdmp:forest-counts | 
	    
	      | create-amp | 
	      http://marklogic.com/xdmp/privileges/create-amp | 
	      privilege to create an amp | 
	      sec:create-amp | 
	    
	      | create-credential | 
	      http://marklogic.com/xdmp/privileges/create-credential | 
	      privilege to create security credentials | 
	      sec:create-credential | 
	    
	      | create-domain | 
	      http://marklogic.com/xdmp/privileges/create-domain | 
	      privilege to create domains | 
	      dom:create | 
	    
	      | create-external-security | 
	      http://marklogic.com/xdmp/privileges/create-external-security | 
	      privilege to create an external authentication configuration | 
	      sec:create-external-security | 
	    
	      | create-pipeline | 
	      http://marklogic.com/xdmp/privileges/create-pipeline | 
	      privilege to create a pipeline | 
	      p:insert
p:create | 
	    
	      | create-privilege | 
	      http://marklogic.com/xdmp/privileges/create-privilege | 
	      privilege to create a privilege | 
	      sec:create-role | 
	    
	      | create-role | 
	      http://marklogic.com/xdmp/privileges/create-role | 
	      privilege to create a role | 
	      sec:create-role | 
	    
	      | create-trigger | 
	      http://marklogic.com/xdmp/privileges/create-trigger | 
	      privilege to create a trigger | 
	      trgr:create-trigger | 
	    
	      | create-user | 
	      http://marklogic.com/xdmp/privileges/create-user | 
	      privilege to create a user | 
	      sec:create-user | 
	    
	      | credential-get-certificate | 
	      http://marklogic.com/xdmp/privileges/credential-get-certificate | 
	      privilege to return the certificate for a credential | 
	      sec:credential-get-certificate | 
	    
	      | credential-get-description | 
	      http://marklogic.com/xdmp/privileges/credential-get-description | 
	      privilege to return the description of a credential | 
	      sec:credential-get-description | 
	    
	      | credential-get-id | 
	      http://marklogic.com/xdmp/privileges/credential-get-id | 
	      privilege to return the id of a credential | 
	      sec:credential-get-id | 
	    
	      | credential-get-password | 
	      http://marklogic.com/xdmp/privileges/credential-get-password | 
	      privilege to return the password for a credential | 
	      sec:credential-get-password | 
	    
	      | credential-get-permissions | 
	      http://marklogic.com/xdmp/privileges/credential-get-permissions | 
	      privilege to return the permissions for a credential | 
	      sec:credential-get-permissions | 
	    
	      | credential-get-private-key | 
	      http://marklogic.com/xdmp/privileges/credential-get-private-key | 
	      privilege to return the private key for a credential | 
	      sec:credential-get-private-key | 
	    
	      | credential-get-signing | 
	      http://marklogic.com/xdmp/privileges/credential-get-signing | 
	      privilege to return the signing flag for a credential | 
	      sec:credential-get-signing | 
	    
	      | credential-get-targets | 
	      http://marklogic.com/xdmp/privileges/credential-get-targets | 
	      privilege to return the targets for a credential | 
	      sec:credential-get-targets | 
	    
	      | credential-get-username | 
	      http://marklogic.com/xdmp/privileges/credential-get-username | 
	      privilege to return the user name for a credential | 
	      sec:credential-get-username | 
	    
	      | credential-set-certificate | 
	      http://marklogic.com/xdmp/privileges/credential-set-certificate | 
	      privilege to update the certificate for a credential | 
	      sec:credential-set-certificate | 
	    
	      | credential-set-description | 
	      http://marklogic.com/xdmp/privileges/credential-set-description | 
	      privilege to update the description for a credential | 
	      sec:credential-set-description | 
	    
	      | credential-set-name | 
	      http://marklogic.com/xdmp/privileges/credential-set-name | 
	      privilege to update the name for a credential | 
	      sec:credential-set-name | 
	    
	      | credential-set-password | 
	      http://marklogic.com/xdmp/privileges/credential-set-password | 
	      privilege to update the password for a credential | 
	      sec:credential-set-password | 
	    
	      | credential-set-permissions | 
	      http://marklogic.com/xdmp/privileges/credential-set-permissions | 
	      privilege to update the permissions for a credential | 
	      sec:credential-set-permissions | 
	    
	      | credential-set-signing | 
	      http://marklogic.com/xdmp/privileges/credential-set-signing | 
	      privilege to update the signing flag for a credential | 
	      sec:credential-set-signing | 
	    
	      | credential-set-targets | 
	      http://marklogic.com/xdmp/privileges/credential-set-targets | 
	      privilege to update the targets for a credential | 
	      sec:credential-set-targets | 
	    
	      | credential-set-username | 
	      http://marklogic.com/xdmp/privileges/credential-set-username | 
	      privilege to update the user name for a credential | 
	      sec:credential-set-username | 
	    
	      | credentials-get-aws | 
	      http://marklogic.com/xdmp/privileges/credentials-get-aws | 
	      privilege to return the Amazon Web Services access key, secret key, and session token | 
	      sec:credentials-get-aws | 
	    
	      | credentials-set-aws | 
	      http://marklogic.com/xdmp/privileges/credentials-set-aws | 
	      privilege to set the Amazon Web Services access key, secret key, and session token | 
	      sec:credentials-set-aws | 
	    
	      | cts-write-dictionary | 
	      http://marklogic.com/xdmp/privileges/cts-write-dictionary | 
	       | 
	       | 
	    
	      | database-node-query-rolesets | 
	      http://marklogic.com/xdmp/privileges/database-node-query-rolesets | 
	      privilege to return a sequence of query-rolesets | 
	      xdmp:database-node-query-rolesets | 
	    
	      | debug-any-requests | 
	      http://marklogic.com/xdmp/privileges/debug-any-requests | 
	      privilege to debug all requests from any user | 
	      debug built-ins | 
	    
	      | debug-my-requests | 
	      http://marklogic.com/xdmp/privileges/debug-my-requests | 
	      privilege to debug your own requests | 
	      debug buit-ins | 
	    
	      | dls-admin | 
	      http://marklogic.com/xdmp/privileges/dls-admin | 
	      privilege to configure the Library Services | 
	      dls:break-checkout,
dls:retention-rule,
dls:retention-rule-insert,
dls:retention-rule-remove  | 
	    
	      | dls-user | 
	      http://marklogic.com/xdmp/privileges/dls-user | 
	      privilege to use the Library Services | 
	      dls:as-of-query 
dls:author-query 
dls:document-add-collections
dls:document-add-permissions
dls:document-add-properties
dls:document-checkin
dls:document-checkout
dls:document-checkout-status
dls:document-delete
dls:document-extract-part 
dls:document-get-permissions
dls:document-history 
dls:document-include-query 
dls:document-insert-and-manage 
dls:document-is-managed 
dls:document-manage 
dls:document-purge 
dls:document-remove-collections 
dls:document-remove-permissions 
dls:document-remove-properties 
dls:document-retention-rules 
dls:document-set-collections 
dls:document-set-permissions 
dls:document-set-properties 
dls:document-set-property 
dls:document-set-quality 
dls:document-unmanage 
dls:document-update 
dls:document-version 
dls:document-version-as-of 
dls:document-version-delete
dls:document-version-query 
dls:document-version-uri 
dls:document-versions-query 
dls:documents-query
dls:link-expand 
dls:link-references 
dls:node-expand 
dls:purge 
dls:retention-rules  | 
	    
	      | ec2-http-protected | 
	      http://marklogic.com/xdmp/privileges/ec2-http-protected | 
	       | 
	       | 
	    
	      | environment-ui | 
	      http://marklogic.com/xdmp/privileges/environment-ui | 
	       | 
	       | 
	    
	      | external-security-clear-cache | 
	      http://marklogic.com/xdmp/privileges/external-security-clear-cache | 
	      privilege to clear the login cache in an external authorization configuration object | 
	      sec:external-security-clear-cache | 
	    
	      | external-security-get-authentication | 
	      http://marklogic.com/xdmp/privileges/external-security-get-authentication | 
	      privilege to return the authentication protocol set in an external authorization configuration object | 
	      sec:external-security-get-authentication | 
	    
	      | external-security-get-authorization | 
	      http://marklogic.com/xdmp/privileges/external-security-get-authorization | 
	      privilege to return the authorization scheme set in an external authorization configuration object | 
	      sec:external-security-get-authorization | 
	    
	      | external-security-get-cache-timeout | 
	      http://marklogic.com/xdmp/privileges/external-security-get-cache-timeout | 
	      privilege to return the login cache timeout set in an external authorization configuration object | 
	      sec:external-security-get-cache-timeout | 
	    
	      | external-security-get-description | 
	      http://marklogic.com/xdmp/privileges/external-security-get-description | 
	      privilege to return the description set in an external authorization configuration object  | 
	      sec:external-security-get-description | 
	    
	      | external-security-get-http-option | 
	      http://marklogic.com/xdmp/privileges/external-security-get-http-option | 
	      privilege to return the http options set in an external authorization configuration object  | 
	      sec:external-security-get-http-options | 
	    
	      | external-security-get-ldap-attribute | 
	      http://marklogic.com/xdmp/privileges/external-security-get-ldap-attribute | 
	      privilege to return the LDAP attribute for user lookup set in an external authorization configuration object  | 
	      sec:external-security-get-ldap-attribute | 
	    
	      | external-security-get-ldap-base | 
	      http://marklogic.com/xdmp/privileges/external-security-get-ldap-base | 
	      privilege to return the LDAP base for user lookup set in an external authorization configuration object  | 
	      sec:external-security-get-ldap-base | 
	    
	      | external-security-get-ldap-bind-method | 
	      http://marklogic.com/xdmp/privileges/external-security-get-ldap-bind-method | 
	      privilege to return the bind method set in an external authorization configuration object  | 
	      sec:external-security-get-ldap-bind-method | 
	    
	      | external-security-get-ldap-default-user | 
	      http://marklogic.com/xdmp/privileges/external-security-get-ldap-default-user | 
	      privilege to return the default LDAP user name set in an external authorization configuration object  | 
	      sec:external-security-get-ldap-default-user | 
	    
	      | external-security-get-ldap-member-attribute | 
	      http://marklogic.com/xdmp/privileges/external-security-get-ldap-member-attribute | 
	      privilege to return the member attribute set in an external authorization configuration object  | 
	      sec:external-security-get-ldap-member-attribute | 
	    
	      | external-security-get-ldap-memberof-attribute | 
	      http://marklogic.com/xdmp/privileges/external-security-get-ldap-memberof-attribute | 
	      privilege to return the memberof attribute set in an external authorization configuration object  | 
	      sec:external-security-get-ldap-memberof-attribute | 
	    
	      | external-security-get-ldap-server-uri | 
	      http://marklogic.com/xdmp/privileges/external-security-get-ldap-server-uri | 
	      privilege to return the LDAP server uri set in an external authorization configuration object  | 
	      sec:external-security-get-ldap-server-uri | 
	    
	      | external-security-get-saml-attribute-names | 
	      http://marklogic.com/xdmp/privileges/external-security-get-saml-attribute-names | 
	      privilege to return the SAML attribute names set in an external authorization configuration object  | 
	      sec:external-security-get-saml-attribute-names | 
	    
	      | external-security-get-saml-entity-id | 
	      http://marklogic.com/xdmp/privileges/external-security-get-saml-entity-id | 
	      privilege to return the SAML entity id set in an external authorization configuration object  | 
	      sec:external-security-get-saml-entity-id | 
	    
	      | external-security-get-saml-privilege-attribute-name | 
	      http://marklogic.com/xdmp/privileges/external-security-get-saml-privilege-attribute-name | 
	      privilege to return the SAML privilege attribute name set in an external authorization configuration object  | 
	      sec:external-security-get-saml-privilege-attribute-name | 
	    
	      | external-security-get-ssl-client-certificate-authorities | 
	      http://marklogic.com/xdmp/privileges/external-security-get-ssl-client-certificate-authorities | 
	      privilege to return the external security's SSL client certificate authorities set in an external authorization configuration object  | 
	      sec:external-security-get-ssl-client-certificate-authorities | 
	    
	      | external-security-get-ssl-require-client-certificate | 
	      http://marklogic.com/xdmp/privileges/external-security-get-ssl-requier-client-certificate | 
	      privilege to return the external security's SSL require client certificate flag set in an external authorization configuration object  | 
	      sec:external-security-get-ssl-require-client-certificate | 
	    
	      | external-security-set-authentication | 
	      http://marklogic.com/xdmp/privileges/external-security-set-authentication | 
	      privilege to set the authentication protocol in an external authorization configuration object  | 
	      sec:external-security-set-authentication | 
	    
	      | external-security-set-authorization | 
	      authorization 	http://marklogic.com/xdmp/privileges/external-security-set-authorization | 
	      privilege to set the authorization scheme in an external authorization configuration object  | 
	      sec:external-security-set-authorization | 
	    
	      | external-security-set-cache-timeout | 
	      http://marklogic.com/xdmp/privileges/external-security-set-cache-timeout | 
	      privilege to set the login cache timeout in an external authorization configuration object  | 
	      sec:external-security-set-cache-timeout | 
	    
	      | external-security-set-description | 
	      http://marklogic.com/xdmp/privileges/external-security-set-description | 
	      privilege to set the description in an external authorization configuration object  | 
	      sec:external-security-set-description | 
	    
	      | external-security-set-http-options | 
	      http://marklogic.com/xdmp/privileges/external-security-set-http-options | 
	      privilege to set the http options in an external authorization configuration object  | 
	      sec:external-security-set-http-options | 
	    
	      | external-security-set-ldap-attribute | 
	      http://marklogic.com/xdmp/privileges/external-security-set-ldap-attribute | 
	      privilege to set the LDAP attribute for user lookup in an external authorization configuration object  | 
	      sec:external-security-set-ldap-attribute | 
	    
	      | external-security-set-ldap-base | 
	      http://marklogic.com/xdmp/privileges/external-security-set-ldap-base | 
	      privilege to set the LDAP base for user lookup in an external authorization configuration object  | 
	      sec:external-security-set-ldap-base | 
	    
	      | external-security-set-ldap-bind-method | 
	      http://marklogic.com/xdmp/privileges/external-security-set-ldap-bind-method | 
	      privilege to set the bind method in an external authorization configuration object  | 
	      sec:external-security-set-ldap-bind-method | 
	    
	      | external-security-set-ldap-default-user | 
	      http://marklogic.com/xdmp/privileges/external-security-set-ldap-default-user | 
	      privilege to set the default user name in an external authorization configuration object  | 
	      sec:external-security-set-ldap-default-user | 
	    
	      | external-security-set-ldap-member-attribute | 
	      http://marklogic.com/xdmp/privileges/external-security-set-ldap-member-attribute | 
	      privilege to set the member LDAP attribute in an external authorization configuration object  | 
	      sec:external-security-set-ldap-member-attribute | 
	    
	      | external-security-set-ldap-memberof-attribute | 
	      http://marklogic.com/xdmp/privileges/external-security-set-ldap-memberof-attribute | 
	      privilege to set the memberof LDAP attribute in an external authorization configuration object  | 
	      sec:external-security-set-ldap-memberof-attribute | 
	    
	      | external-security-set-ldap-password | 
	      http://marklogic.com/xdmp/privileges/external-security-set-ldap-password | 
	      privilege to set the default user password in an external authorization configuration object  | 
	      sec:external-security-set-ldap-password | 
	    
	      | external-security-set-ldap-server-uri | 
	      http://marklogic.com/xdmp/privileges/external-security-set-ldap-server-uri | 
	      privilege to set the LDAP server uri in an external authorization configuration object  | 
	      sec:external-security-set-ldap-server-uri | 
	    
	      | external-security-set-name | 
	      http://marklogic.com/xdmp/privileges/external-security-set-name | 
	      privilege to set the name of an external authorization configuration object  | 
	      sec:external-security-set-name | 
	    
	      | external-security-set-saml-attribute-names | 
	      http://marklogic.com/xdmp/privileges/external-security-set-saml-attribute-names | 
	      privilege to set SAML attribute names used by other security objects to identify a SAML configuration | 
	      sec:external-security-set-saml-attribute-names | 
	    
	      | external-security-set-saml-entity-id | 
	      http://marklogic.com/xdmp/privileges/external-security-set-saml-entity-id | 
	      privilege to set the SAML entity ID used by other security objects to identify a SAML configuration | 
	      sec:external-security-set-saml-entity-id | 
	    
	      | external-security-set-saml-privilege-attribute-name | 
	      http://marklogic.com/xdmp/privileges/external-security-set-saml-privilege-attribute-name | 
	      privilege to set the SAML privilege attribute name in a SAML configuration | 
	      sec:external-security-set-saml-privilege-attribute-name | 
	    
	      | external-security-set-ssl-client-certificate-authorities | 
	      http://marklogic.com/xdmp/privileges/external-security-set-ssl-client-certificate-authorities | 
	      privilege to set the SSL client certificate authorities in an external authorization configuration object  | 
	      sec:external-security-set-ssl-client-certificate-authorities | 
	    
	      | external-security-set-ssl-require-client-certificate | 
	      http://marklogic.com/xdmp/privileges/external-security-set-ssl-requier-client-certificate | 
	      privilege to set the SSL require client certificate flag in an external authorization configuration object  | 
	      sec:external-security-set-ssl-require-client-certificate | 
	    
	      | flexrep-admin | 
	      http://marklogic.com/xdmp/privileges/flexrep-admin | 
	      privilege to administer flexible replication | 
	      flexible replication functions | 
	    
	      | flexrep-internal | 
	      http://marklogic.com/xdmp/privileges/flexrep-internal | 
	      used for amping flexible replication functions | 
	      flexible-internal | 
	    
	      | flexrep-user | 
	      http://marklogic.com/xdmp/privileges/flexrep-user | 
	      privilege to use flexible replication | 
	      flexible replication user functions | 
	    
	      | forget-any-xa-transactions | 
	      http://marklogic.com/xdmp/privileges/forget-any-xa-transactions | 
	      privilege to run built-in to forget XA transactions for any transactions | 
	      xdmp:xa-forget,
xdmp:xq-forget-xid | 
	    
	      | forget-my-xa-transactions | 
	      http://marklogic.com/xdmp/privileges/forget-my-xa-transactions | 
	      privilege to run built-in to forget XA transactions for the user's transactions | 
	      xdmp:xa-forget,xdmp:xq-forget-xid | 
	    
	      | get-amp | 
	      http://marklogic.com/xdmp/privileges/get-amp | 
	      privilege to get an amp | 
	      sec:get-amp | 
	    
	      | get-an-admin-user-id | 
	      http://marklogic.com/xdmp/privileges/get-an-admin-user-id | 
	      privilege to get an admin user id | 
	       | 
	    
	      | get-appserver-logs | 
	      http://marklogic.com/xdmp/privileges/logs/appserver | 
	      privilege to get App Server logs | 
	       | 
	    
	      | get-compartments | 
	      http://marklogic.com/xdmp/privileges/get-compartments | 
	      privilege to get a the compartments | 
	      sec:get-compartments | 
	    
	      | get-credential | 
	      http://marklogic.com/xdmp/privileges/get-credential 	 | 
	      privilege to get a PEM encoded X509 certificate | 
	      sec:get-credential | 
	    
	      | get-credential-by-id | 
	      http://marklogic.com/xdmp/privileges/get-credential-by-id | 
	      privilege to get a PEM encoded X509 certificate | 
	       | 
	    
	      | get-credential-ids | 
	      http://marklogic.com/xdmp/privileges/get-credential-ids | 
	      privilege to get all of the credential IDs in the security database | 
	       | 
	    
	      | get-credential-names | 
	      http://marklogic.com/xdmp/privileges/get-credential-names | 
	      privilege to get all of the credential names in the security database | 
	       | 
	    
	      | get-credentials-encoded-kek | 
	      http://marklogic.com/xdmp/privileges/get-credentials-encoded-kek | 
	       | 
	       | 
	    
	      | get-logs | 
	      http://marklogic.com/xdmp/privileges/logs | 
	      privilege to get logs  | 
	       | 
	    
	      | get-privilege | 
	      http://marklogic.com/xdmp/privileges/get-privilege | 
	      privilege to get a privilege from action uri and type | 
	      sec:get-privilege | 
	    
	      | get-role-ids | 
	      http://marklogic.com/xdmp/privileges/get-role-ids | 
	      privilege to get role ids | 
	      internal functions | 
	    
	      | get-role-names | 
	      http://marklogic.com/xdmp/privileges/get-role-names | 
	      privilege to get role names | 
	      internal functions | 
	    
	      | get-saml-entity-ids | 
	      http://marklogic.com/xdmp/privileges/get-saml-entity-ids | 
	      privilege to get the SAML entity ids stored in the Security database | 
	      sec:get-saml-entity-ids | 
	    
	      | get-system-logs | 
	      http://marklogic.com/xdmp/privileges/logs/system | 
	      privilege to get system logs | 
	       | 
	    
	      | get-taskserver-logs | 
	      http://marklogic.com/xdmp/privileges/logs/taskserver | 
	      privilege to get taskserver logs | 
	       | 
	    
	      | get-user-names | 
	      http://marklogic.com/xdmp/privileges/get-user-names | 
	      privilege to get user names | 
	       sec:get-user-names  | 
	    
	      | grant-all-roles | 
	      http://marklogic.com/xdmp/privileges/grant-all-roles | 
	      privilege to grant a user all roles.  Either grant-all-roles or grant-my-roles would be needed by functions that assign roles.   | 
	      sec:create-user,
sec:user-set-roles,
sec:user-add-roles,
sec:user-remove-roles,
sec:create-role,
sec:role-set-roles,
sec:role-add-roles,
sec:role-remove-roles,
sec:remove-role-from-roles,
sec:remove-role-from-privileges,
sec:remove-role-from-amps,
sec:create-role,
sec:privilege-set-roles,
sec:privilege-add-roles,
sec:privilege-remove-roles,
sec:create-amp,
sec:amp-set-roles,
sec:amp-add-roles,
sec:amp-remove-roles | 
	    
	      | grant-my-roles | 
	      http://marklogic.com/xdmp/privileges/grant-my-roles | 
	      privilege to grant a user my roles.  Either grant-all-roles or grant-my-roles would be needed by functions that assign roles.   | 
	      sec:create-user,
sec:user-set-roles,
sec:user-add-roles,
sec:user-remove-roles,
sec:create-role,
sec:role-set-roles,
sec:role-add-roles,
sec:role-remove-roles,
sec:remove-role-from-roles,
sec:remove-role-from-privileges,
sec:remove-role-from-amps,
sec:create-role,
sec:privilege-set-roles,
sec:privilege-add-roles,
sec:privilege-remove-roles,
sec:create-amp,
sec:amp-set-roles,
sec:amp-add-roles,
sec:amp-remove-roles | 
	    
	      | hadoop-user-read | 
	      http://marklogic.com/xdmp/privileges/hadoop-user-read | 
	      privilege to use MarkLogic Server as an input for a Hadoop MapReduce job that reads data from MarkLogic Server. | 
	      Java APIs in the Hadoop package. | 
	    
	      | hadoop-user-write | 
	      http://marklogic.com/xdmp/privileges/hadoop-user-write | 
	      privilege to use MarkLogic Server as an input for a Hadoop MapReduce job that writes data from MarkLogic Server | 
	      Java APIs in the Hadoop package. | 
	    
	      | healthcheck | 
	      http://marklogic.com/xdmp/privileges/healthcheck | 
	      privilege to use the HealthCheck App Server | 
	       | 
	    
	      | infostudio | 
	      http://marklogic.com/xdmp/privileges/infostudio | 
	      privilege to use Information StudioInformation Studio is no longer part of MarkLogic | 
	      Information Studio functions | 
	    
	      | java | 
	      http://marklogic.com/xdmp/privileges/java | 
	       | 
	       | 
	    
	      | manage | 
	      http://marklogic.com/xdmp/privileges/manage | 
	      privilege to run the Management API | 
	      package:add-database,
package:add-appserver,
All of the resource addresses in the Management API  | 
	    
	      | manage-admin | 
	      http://marklogic.com/xdmp/privileges/manage-admin | 
	      privilege to use the manage REST APIs | 
	       | 
	    
	      | my-transaction-locks | 
	      http://marklogic.com/xdmp/privileges/my-transaction-locks | 
	      privilege to return URIs currently locked for read or write by a transaction | 
	      xdmp:transaction-locks | 
	    
	      | native-plugin | 
	      http://marklogic.com/xdmp/privileges/native-plugin 	 | 
	       | 
	       | 
	    
	      | node-query-rolesets | 
	      http://marklogic.com/xdmp/privileges/node-query-rolesets | 
	      privilege to return query-rolesets | 
	      xdmp:node-query-rolesets | 
	    
	      | odbc:eval | 
	      http://marklogic.com/xdmp/privileges/odbc-eval | 
	      privilege to execute eval statements from odbc | 
	      xdmp:eval | 
	    
	      | odbc:eval-in | 
	      http://marklogic.com/xdmp/privileges/odbc-eval-in | 
	      privilege to execute eval-in statements from odbc | 
	      xdmp:eval-in | 
	    
	      | odbc:eval-modules-change | 
	      http://marklogic.com/xdmp/privileges/odbc-eval-modules-change | 
	      privilege to execute eval statements that change a modules database from odbc | 
	      xdmp:eval | 
	    
	      | odbc:eval-modules-change-file | 
	      http://marklogic.com/xdmp/privileges/odbc-eval-modules-change-file | 
	      privilege to execute eval statements that change a filesystem root from odbc | 
	      xdmp:eval | 
	    
	      | odbc:insert | 
	      http://marklogic.com/xdmp/privileges/odbc-insert | 
	      privilege to execute insert statements from odbc | 
	      odbc inserts | 
	    
	      | odbc:insert-in | 
	      http://marklogic.com/xdmp/privileges/odbc-insert-in | 
	      privilege to execute insert statements from odbc | 
	      odbc inserts into another database | 
	    
	      | odbc:invoke | 
	      http://marklogic.com/xdmp/privileges/odbc-invoke | 
	      privilege to execute invoke statements from odbc | 
	      odbc invokes | 
	    
	      | odbc:invoke-in | 
	      http://marklogic.com/xdmp/privileges/odbc-invoke-in | 
	      privilege to execute invoke statements from odbc | 
	      odbc invokes into another database | 
	    
	      | odbc:invoke-modules-change | 
	      http://marklogic.com/xdmp/privileges/odbc-invoke-modules-change | 
	      privilege to execute invoke statements that change a modules database from odbc | 
	      odbc invokes that change the modules database | 
	    
	      | odbc:invoke-modules-change-file | 
	      http://marklogic.com/xdmp/privileges/odbc-invoke-modules-change-file | 
	      privilege to execute invoke statements that change a filesystem root from odbc | 
	      odbc invokes that change the filesystem root | 
	    
	      | odbc:spawn | 
	      http://marklogic.com/xdmp/privileges/odbc-spawn | 
	      privilege to execute spawn statements from odbc | 
	      odbc spawns | 
	    
	      | odbc:spawn-in | 
	      http://marklogic.com/xdmp/privileges/odbc-spawn-in | 
	      privilege to execute spawn statements from odbc | 
	      odbc spawns into another database | 
	    
	      | odbc:spawn-modules-change | 
	      http://marklogic.com/xdmp/privileges/odbc-spawn-modules-change | 
	      privilege to execute spawn statements that change a modules database from odbc | 
	      odbc spawn that change the modules database | 
	    
	      | odbc:spawn-modules-change-file | 
	      http://marklogic.com/xdmp/privileges/odbc-spawn-modules-change-file | 
	      privilege to execute spawn statements that change a filesystem root from odbc | 
	      odbc spawn that change the filesystem root | 
	    
	      | opsdir-admin | 
	      http://marklogic.com/xdmp/privileges/opsdir-admin 	 | 
	      privilege to execute Ops Director administrative operations | 
	       | 
	    
	      | opsdir-data-internal | 
	      http://marklogic.com/xdmp/privileges/opsdir-data-internal | 
	      internal privilege for Ops Director  | 
	       | 
	    
	      | opsdir-license-admin | 
	      http://marklogic.com/xdmp/privileges/opsdir-license-admin | 
	      privilege to access Ops Director license information | 
	       | 
	    
	      | opsdir-user | 
	      http://marklogic.com/xdmp/privileges/opsdir-user | 
	      privilege to access Ops Director browser application | 
	       | 
	    
	      | path-add-permissions | 
	      http://marklogic.com/xdmp/privileges/path-add-permissions | 
	      privilege to add permissions for a protected path | 
	      sec:path-add-permissions | 
	    
	      | path-get-permissions | 
	      http://marklogic.com/xdmp/privileges/path-get-permissions | 
	      privilege to return permissions for a protected path | 
	      sec:path-get-permissions | 
	    
	      | path-remove-permissions | 
	      http://marklogic.com/xdmp/privileges/path-remove-permissions | 
	      privilege to remove permissions for a protected path | 
	      sec:path-remove-permissions | 
	    
	      | path-set-permissions | 
	      http://marklogic.com/xdmp/privileges/path-set-permissions | 
	      privilege to set permissions for a protected path | 
	      sec:path-set-permissions | 
	    
	      | pki | 
	      http://marklogic.com/xdmp/privileges/pki | 
	      privilege to use the PKI functions. | 
	      pki:create-template,
pki:delete-certificate,
pki:delete-template ,
pki:generate-certificate-request,
pki:generate-template-certificate-authority ,
pki:generate-temporary-certificate,
pki:generate-temporary-certificate-if-necessary,
pki:get-certificate,
pki:get-certificate-pem,
pki:get-certificate-xml ,
pki:get-certificates,
pki:get-certificates-for-template ,
pki:get-certificates-for-template-xml,
pki:get-pending-certificate-request,
pki:get-pending-certificate-requests-pem ,
pki:get-pending-certificate-requests-xml,
pki:get-template,
pki:get-template-by-name,
pki:get-template-certificate-authority 
pki:get-template-ids,
pki:get-trusted-certificate-ids,
pki:insert-certificate-revocation-list,
pki:insert-signed-certificates,
pki:insert-template,
pki:insert-trusted-certificates,
pki:is-temporary,
pki:need-certificate,
pki:template-get-description,
pki:template-get-id,
pki:template-get-key-options,
pki:template-get-key-type,
pki:template-get-name,
pki:template-get-request,
pki:template-get-version,
pki:template-in-use,
pki:template-set-description,
pki:template-set-key-options,
pki:template-set-key-type,
pki:template-set-name,
pki:template-set-request  | 
	    
	      | plugin-register | 
	      http://marklogic.com/xdmp/privileges/plugin-register | 
	      privilege to use the plugin API | 
	      plugin:register | 
	    
	      | plugin-server-fields | 
	      http://marklogic.com/xdmp/privileges/plugin-server-fields | 
	      privilege to use the plugin API | 
	      Used by the plugin API | 
	    
	      | prepare-any-xa-transactions | 
	      http://marklogic.com/xdmp/privileges/prepare-any-xa-transactions | 
	      privilege to run built-in to prepare XA transactions for any transactions | 
	      xdmp:xa-prepare | 
	    
	      | prepare-my-xa-transactions | 
	      http://marklogic.com/xdmp/privileges/prepare-my-xa-transactions | 
	      privilege to run built-in to prepare XA transactions for the user's transactions | 
	      xdmp:xa-prepare | 
	    
	      | privilege-add-roles | 
	      http://marklogic.com/xdmp/privileges/privilege-add-roles | 
	      privilege to assign the privilege to additional roles | 
	      sec:privilege-add-roles | 
	    
	      | privilege-get-roles | 
	      http://marklogic.com/xdmp/privileges/privilege-get-roles | 
	      privilege to get all roles associated with a privilege | 
	      sec:privilege-get-roles | 
	    
	      | privilege-remove-roles | 
	      http://marklogic.com/xdmp/privileges/privilege-remove-roles | 
	      privilege to remove privilege from roles to which it is assigned | 
	      sec:privilege-remove-roles | 
	    
	      | privilege-set-name | 
	      http://marklogic.com/xdmp/privileges/privilege-set-name | 
	      privilege to set a privilege's name | 
	      sec:privilege-set-name | 
	    
	      | privilege-set-roles | 
	      http://marklogic.com/xdmp/privileges/privilege-set-roles | 
	      privilege to set roles associated with a privilege | 
	      sec:privilege-set-roles | 
	    
	      | profile-any-requests | 
	      http://marklogic.com/xdmp/privileges/profile-any-requests | 
	      privilege to profile requests initiated by any user | 
	      prof:enable and other profile APIs | 
	    
	      | profile-my-requests | 
	      http://marklogic.com/xdmp/privileges/profile-my-requests | 
	      privilege to profile requests initiated by the user running the request from which profiling is called | 
	      prof:enable and other profile APIs | 
	    
	      | protect-collection | 
	      http://marklogic.com/xdmp/privileges/protect-collection | 
	      privilege to make a new or existing collection protected | 
	      sec:protect-collection | 
	    
	      | protect-path | 
	      http://marklogic.com/xdmp/privileges/protect-path | 
	      privilege to protect a path | 
	      sec:protect-path | 
	    
	      | qconsole | 
	      http://marklogic.com/xdmp/privileges/qconsole | 
	      privilege to run Query Console | 
	       | 
	    
	      | redaction-user | 
	      http://marklogic.com/xdmp/privileges/redaction-user | 
	      privilege to validate and set redaction rules | 
	      rdt:rule-validaterdt:redact | 
	    
	      | remove-amp | 
	      http://marklogic.com/xdmp/privileges/remove-amp | 
	      privilege to remove an amp from the security database | 
	      sec:remove-amp | 
	    
	      | remove-credential | 
	      http://marklogic.com/xdmp/privileges/remove-credential | 
	      privilege to remove credentials | 
	      sec:remove-credential | 
	    
	      | remove-credential-by-id | 
	      http://marklogic.com/xdmp/privileges/remove-credential-by-id | 
	      privilege to remove credentials | 
	      sec:remove-credential-by-id | 
	    
	      | remove-external-security | 
	      http://marklogic.com/xdmp/privileges/remove-external-security | 
	      privilege to remove external authentication configuration objects | 
	      sec:remove-external-security | 
	    
	      | remove-path | 
	      http://marklogic.com/xdmp/privileges/remove-path | 
	      privilege to remove protection from protected paths  | 
	      sec:remove-path | 
	    
	      | remove-privilege | 
	      http://marklogic.com/xdmp/privileges/remove-privilege | 
	      privilege to remove a privilege from the security database | 
	      sec:remove-privilege | 
	    
	      | remove-query-rolesets | 
	      http://marklogic.com/xdmp/privileges/remove-query-rolesets | 
	      privilege to remove query rolesets from the Security database | 
	      sec:remove-query-rolesets | 
	    
	      | remove-role | 
	      http://marklogic.com/xdmp/privileges/remove-role | 
	      privilege to remove a role from the security database | 
	      sec:remove-role | 
	    
	      | remove-role-from-amps | 
	      http://marklogic.com/xdmp/privileges/remove-role-from-amps | 
	      privilege to remove a role from all amps in the security database | 
	      sec:remove-role-from-amps | 
	    
	      | remove-role-from-privileges | 
	      http://marklogic.com/xdmp/privileges/remove-role-from-privileges | 
	      privilege to remove a role from all privileges in the security database | 
	      sec:remove-role-from-privileges | 
	    
	      | remove-role-from-roles | 
	      http://marklogic.com/xdmp/privileges/remove-role-from-roles | 
	      privilege to remove a role from all roles in the security database | 
	      sec:remove-role-from-roles | 
	    
	      | remove-role-from-users | 
	      http://marklogic.com/xdmp/privileges/remove-role-from-users | 
	      privilege to remove a role from all users in the security database | 
	      sec:remove-role-from-users | 
	    
	      | remove-user | 
	      http://marklogic.com/xdmp/privileges/remove-user | 
	      privilege to remove a user from the security database | 
	      sec:remove-user | 
	    
	      | rest-admin | 
	      http://marklogic.com/xdmp/privileges/rest-admin | 
	      privilege to perform administrative tasks using the REST API | 
	      REST APIs | 
	    
	      | rest-reader | 
	      http://marklogic.com/xdmp/privileges/rest-reader | 
	      privilege to perform read operations using the REST API | 
	      REST APIs | 
	    
	      | rest-tracer | 
	      http://marklogic.com/xdmp/privileges/rest-tracer | 
	       | 
	       | 
	    
	      | rest-writer | 
	      http://marklogic.com/xdmp/privileges/rest-writer | 
	      privilege to perform update tasks using the REST API | 
	      REST APIs | 
	    
	      | role-add-roles | 
	      http://marklogic.com/xdmp/privileges/role-add-roles | 
	      privilege to add roles to the roles of  a specified role | 
	      sec:role-add-roles | 
	    
	      | role-exists | 
	      http://marklogic.com/xdmp/privileges/get-role | 
	      privilege to find out if a role exists | 
	      sec:role-exists | 
	    
	      | role-get-compartment | 
	      http://marklogic.com/xdmp/privileges/role-get-compartment | 
	      privilege to get a role's compartment | 
	      sec:role-get-compartment | 
	    
	      | role-get-default-collections | 
	      http://marklogic.com/xdmp/privileges/role-get-default-collections | 
	      privilege to get a role's default collections | 
	      sec:role-get-default-collections | 
	    
	      | role-get-default-permissions | 
	      http://marklogic.com/xdmp/privileges/role-get-default-permissions | 
	      privilege to get a role's default permissions | 
	      sec:role-get-default-permissions | 
	    
	      | role-get-description | 
	      http://marklogic.com/xdmp/privileges/role-get-description | 
	      privilege to get a role's description | 
	      sec:role-get-description | 
	    
	      | role-get-external-names | 
	      http://marklogic.com/xdmp/privileges/role-get-external-names | 
	      privilege to get a role's external LDAP group names | 
	      sec:role-get-external-names | 
	    
	      | role-get-roles | 
	      http://marklogic.com/xdmp/privileges/role-get-roles | 
	      privilege to get all the roles included in the specified role | 
	      sec:role-get-roles | 
	    
	      | role-privileges | 
	      http://marklogic.com/xdmp/privileges/role-privileges | 
	      privilege to get all the privileges for a given role | 
	      sec:role-privileges | 
	    
	      | role-remove-roles | 
	      http://marklogic.com/xdmp/privileges/role-remove-roles | 
	      privilege to remove roles from the roles of a specified role | 
	      sec:role-remove-roles | 
	    
	      | role-set-default-collections | 
	      http://marklogic.com/xdmp/privileges/role-set-default-collections | 
	      privilege to set a role's default collections | 
	      sec:role-set-default-collections | 
	    
	      | role-set-default-permissions | 
	      http://marklogic.com/xdmp/privileges/role-set-default-permissions | 
	      privilege to set a role's default permissions | 
	      sec:role-set-default-permissions | 
	    
	      | role-set-description | 
	      http://marklogic.com/xdmp/privileges/role-set-description | 
	      privilege to set a role's name | 
	      sec:role-set-description | 
	    
	      | role-set-external-names | 
	      http://marklogic.com/xdmp/privileges/role-set-external-names | 
	      privilege to set external LDAP distinguished names for a role | 
	      sec:role-set-external-names | 
	    
	      | role-set-name | 
	      http://marklogic.com/xdmp/privileges/role-set-name | 
	      privilege to change a role's name | 
	      sec:role-set-name | 
	    
	      | role-set-roles | 
	      http://marklogic.com/xdmp/privileges/role-set-roles | 
	      privilege to change all the roles in the specified role | 
	      sec:role-set-roles | 
	    
	      | saml-entity-delete | 
	      http://marklogic.com/xdmp/privileges/saml-entity-delete | 
	      privilege to delete a SAML entity | 
	      sec:saml-entity-delete | 
	    
	      | saml-entity-insert | 
	      http://marklogic.com/xdmp/privileges/saml-entity-insert | 
	      privilege to insert a SAML entity into the Security database | 
	      sec:saml-entity-insert | 
	    
	      | sem:sparql | 
	      http://marklogic.com/xdmp/privileges/sem-sparql | 
	      privilege to run a sparql query | 
	      sem:sparql | 
	    
	      | sem:sparql-update | 
	      http://marklogic.com/xdmp/privileges/sem-sparql-update | 
	      privilege to run a sparql update  | 
	      sem:sparql-update | 
	    
	      | set-any-time-limit | 
	      http://marklogic.com/xdmp/privileges/xdmp-set-request-time-limit-any | 
	      privilege to change the request time limit | 
	      xdmp:set-request-time-limit | 
	    
	      | set-any-transaction-name | 
	      http://marklogic.com/xdmp/privileges/xdmp-set-transaction-name-any | 
	      privilege to set a name for any transaction | 
	      xdmp:set-transaction-name | 
	    
	      | set-any-transaction-time-limit | 
	      http://marklogic.com/xdmp/privileges/xdmp-set-transaction-time-limit-any | 
	      privilege to set a time limit for any transaction | 
	      xdmp:set-transaction-time-limit  | 
	    
	      | set-my-time-limit | 
	      http://marklogic.com/xdmp/privileges/xdmp-set-request-time-limit-my | 
	      privilege to change the request time limit | 
	      xdmp:set-request-time-limit | 
	    
	      | set-my-transaction-name | 
	      http://marklogic.com/xdmp/privileges/xdmp-set-transaction-name-my | 
	      privilege to set a name for the user's transactions | 
	      xdmp:set-transaction-name | 
	    
	      | set-my-transaction-time-limit | 
	      http://marklogic.com/xdmp/privileges/xdmp-set-transaction-time-limit-my | 
	      privilege to set a time limit for the user's transactions | 
	      xdmp:set-transaction-time-limit  | 
	    
	      | status-builtins | 
	      http://marklogic.com/xdmp/privileges/status | 
	      privilege to access the status built-ins | 
	      status built-ins | 
	    
	      | temporal-admin | 
	      http://marklogic.com/xdmp/privileges/temporal-admin | 
	      privilege to execute temporal admin functions | 
	      All temporal admin functions | 
	    
	      | temporal-internal | 
	      http://marklogic.com/xdmp/privileges/temporal-internal | 
	      internal temporal privilege | 
	       | 
	    
	      | temporal-document-protect | 
	      http://marklogic.com/xdmp/privileges/temporal-document-protect | 
	      privilege to protect a temporal document from certain temporal operations for a period of time | 
	      temporal:document-protect | 
	    
	      | temporal:document-wipe | 
	      http://marklogic.com/xdmp/privileges/temporal-document-wipe | 
	      privilege to delete all versions of a temporal document | 
	      temporal:document-wipe | 
	    
	      | temporal:set-lsqt-automation | 
	      http://marklogic.com/xdmp/privileges/temporal-set-lsqt-automation | 
	      privilege to set Last Stable Query Time (LSQT) management to automatic | 
	      temporal:set-lsqt-automation | 
	    
	      | temporal:set-use-lsqt | 
	      http://marklogic.com/xdmp/privileges/temporal-set-use-lsqt | 
	      privilege to enable or disable the use of LSQT (Last Stable Query Time) on temporal collections | 
	      temporal:set-use-lsqt | 
	    
	      | temporal:statement-set-system-time | 
	      http://marklogic.com/xdmp/privileges/temporal-statement-set-system-time | 
	      privilege to set the system start time on temporal documents | 
	      temporal:statement-set-system-time | 
	    
	      | term-query | 
	      http://marklogic.com/xdmp/privileges/term-query 	 | 
	       | 
	      cts:term-query | 
	    
	      | database-create-sub-database 	 | 
	      http://marklogic.com/xdmp/privileges/database-create-sub-database | 
	      privilege to create sub databases | 
	      tieredstorage:database-create-sub-database | 
	    
	      | database-create-super-database | 
	      http://marklogic.com/xdmp/privileges/database-create-super-database | 
	      privilege to create super databases | 
	      tieredstorage:database-create-super-database | 
	    
	      | database-delete-sub-database | 
	      http://marklogic.com/xdmp/privileges/database-delete-sub-database | 
	      privilege to delete sub databases | 
	      tieredstorage:database-delete-sub-database | 
	    
	      | database-delete-super-database | 
	      http://marklogic.com/xdmp/privileges/database-delete-super-database | 
	      privilege to delete super databases | 
	      tieredstorage:database-delete-super-database | 
	    
	      | database-partition-numbers | 
	      http://marklogic.com/xdmp/privileges/database-partition-numbers | 
	      privilege to return the partition numbers of the forests in a database | 
	      tieredstorage:database-partition-numbers | 
	    
	      | database-partitions | 
	      http://marklogic.com/xdmp/privileges/database-partitions | 
	      privilege to return the names of the partitions in a database | 
	      tieredstorage:database-partitions | 
	    
	      | forest-combine | 
	      http://marklogic.com/xdmp/privileges/forest-combine | 
	      privilege to combine data in multiple forests into one new forest | 
	      tieredstorage:forest-combine | 
	    
	      | forest-migrate | 
	      http://marklogic.com/xdmp/privileges/forest-migrate 	 | 
	      privilege to move data in a forest to new data directories | 
	      tieredstorage:forest-migrate | 
	    
	      | partition-create | 
	      http://marklogic.com/xdmp/privileges/partition-create | 
	      privilege to create a query partition | 
	      tieredstorage:query-partition-create | 
	    
	      | partition-delete | 
	      http://marklogic.com/xdmp/privileges/partition-delete | 
	      privilege to delete a query partition | 
	      tieredstorage:partition-delete | 
	    
	      | partition-delete-query | 
	      http://marklogic.com/xdmp/privileges/partition-delete-query | 
	      privilege to delete a query from a partition | 
	      tieredstorage:partition-delete-query | 
	    
	      | partition-forests | 
	      http://marklogic.com/xdmp/privileges/partition-forests | 
	      privilege to returns ids of the forests in a query partition | 
	      tieredstorage:partition-forests | 
	    
	      | partition-get-exclusion-enabled | 
	      http://marklogic.com/xdmp/privileges/partition-get-exclusion-enabled | 
	      privilege to return the safe-to-exclude setting for a database | 
	      tieredstorage:partition-get-exclusion-enabled | 
	    
	      | partition-get-query | 
	      http://marklogic.com/xdmp/privileges/partition-get-query | 
	      privilege to return the query of a partition | 
	      tieredstorage:partition-get-query | 
	    
	      | partition-migrate | 
	      http://marklogic.com/xdmp/privileges/partition-migrate | 
	      privilege to migrate forests in a partition to a data directory and hosts  | 
	      tieredstorage:partition-migrate | 
	    
	      | partition-number-forests | 
	      http://marklogic.com/xdmp/privileges/partition-number-forests | 
	      privilege to return the IDs of the forests associated with a partition  | 
	      tieredstorage:partition-number-forests | 
	    
	      | partition-queries | 
	      http://marklogic.com/xdmp/privileges/partition-queries | 
	      privilege to return the queries in a schema database | 
	      tieredstorage:partition-queries | 
	    
	      | partition-resize | 
	      http://marklogic.com/xdmp/privileges/partition-resize | 
	      privilege to create or combine forests in a partition | 
	      tieredstorage:partition-resize | 
	    
	      | partition-set-availability | 
	      http://marklogic.com/xdmp/privileges/partition-set-availability | 
	      privilege to set the availability of the partition | 
	      tieredstorage:partition-set-availability | 
	    
	      | partition-set-exclusion-enabled | 
	      http://marklogic.com/xdmp/privileges/partition-set-exclusion-enabled | 
	      privilege to exclude a query partition from being searched if the search query does not match the query assignment policy set for the partition | 
	      tieredstorage:partition-set-exclusion-enabled | 
	    
	      | partition-set-query | 
	      http://marklogic.com/xdmp/privileges/partition-set-query | 
	      privilege to set the query for a partition | 
	      tieredstorage:partition-set-query | 
	    
	      | partition-set-updates-allowed | 
	      http://marklogic.com/xdmp/privileges/partition-set-updates-allowed | 
	      privilege to set update-allowed state for the forests in a partition | 
	      tieredstorage:partition-set-updates-allowed | 
	    
	      | partition-transfer | 
	      http://marklogic.com/xdmp/privileges/partition-transfer | 
	      privilege to transfer a partition from one database to another | 
	      tieredstorage:partition-transfer | 
	    
	      | unprotect-collection | 
	      http://marklogic.com/xdmp/privileges/unprotect-collection | 
	      privilege to change roles for a collection | 
	      xdmp:document-add-collections,
xdmp:document-remove-collections,
xdmp:document-set-collections | 
	    
	      | unprotect-path | 
	      http://marklogic.com/xdmp/privileges/unprotect-path | 
	      privilege to remove a protection from a protected path | 
	      sec:unprotect-path | 
	    
	      | unprotected-collections | 
	      http://marklogic.com/xdmp/privileges/unprotected-collections | 
	      privilege to add to or remove from collections that are unprotected | 
	      xdmp:document-add-collections,
xdmp:document-remove-collections,
xdmp:document-set-collections | 
	    
	      | unprotected-uri | 
	      http://marklogic.com/xdmp/privileges/unprotected-uri | 
	      privilege to create document with uri's that are unprotected | 
	      xdmp:document-insert, 
xdmp:load | 
	    
	      | user-add-roles | 
	      http://marklogic.com/xdmp/privileges/user-add-roles | 
	      privilege to add roles to a user | 
	      sec:user-add-roles | 
	    
	      | user-exists | 
	      http://marklogic.com/xdmp/privileges/get-user | 
	      privilege to check if a user exists in the security database | 
	      sec:user-exists | 
	    
	      | user-get-default-collections | 
	      http://marklogic.com/xdmp/privileges/user-gt-default-collections | 
	      privilege to get a user's default collections | 
	      sec:user-get-default-collections | 
	    
	      | user-get-default-permissions | 
	      http://marklogic.com/xdmp/privileges/user-get-default-permissions | 
	      privilege to get user's default permissions | 
	      sec:user-get-default-permissions | 
	    
	      | user-get-description | 
	      http://marklogic.com/xdmp/privileges/user-get-description | 
	      privilege to get user's description  | 
	      sec:user-get-description 
(if not logged in as user) | 
	    
	      | user-get-external-names | 
	      http://marklogic.com/xdmp/privileges/user-get-external-names | 
	      privilege to get the external LDAP group names assigned to a user | 
	      sec:user-get-external-names | 
	    
	      | user-get-password-extra | 
	      http://marklogic.com/xdmp/privileges/user-get-password-extra | 
	      privilege to get the password-extra element from the user document | 
	      sec:user-get-password-extra | 
	    
	      | user-get-roles | 
	      http://marklogic.com/xdmp/privileges/user-get-roles | 
	      privilege to get user's roles | 
	      sec:user-get-roles 
(if not logged in as user) | 
	    
	      | user-privileges | 
	      http://marklogic.com/xdmp/privileges/user-privileges | 
	      privilege to get a user's complete privileges | 
	      sec:user-privileges 
(if not logged in as user) | 
	    
	      | user-remove-roles | 
	      http://marklogic.com/xdmp/privileges/user-remove-roles | 
	      privilege to remove roles from a user | 
	      sec:user-remove-roles | 
	    
	      | user-set-default-collections | 
	      http://marklogic.com/xdmp/privileges/user-set-default-collections | 
	      privilege to set a user's default collections | 
	      sec:user-set-default-collections | 
	    
	      | user-set-default-permissions | 
	      http://marklogic.com/xdmp/privileges/user-set-default-permissions | 
	      privilege to set a user's default permissions | 
	      sec:user-set-default-permissions | 
	    
	      | user-set-description | 
	      http://marklogic.com/xdmp/privileges/user-set-description | 
	      privilege to set a user's description | 
	      sec:user-set-description (
if not logged in as user) | 
	    
	      | user-set-external-names | 
	      http://marklogic.com/xdmp/privileges/user-set-external-names | 
	      privilege to set the external names for a user | 
	      sec:user-set-external-names | 
	    
	      | user-set-name | 
	      http://marklogic.com/xdmp/privileges/user-set-name | 
	      privilege to set a user's name | 
	      sec:user-set-name 
(if not logged in as user) | 
	    
	      | user-set-password | 
	      http://marklogic.com/xdmp/privileges/user-set-password | 
	      privilege to set user's password  | 
	      sec:user-set-password (
if not logged in as user) | 
	    
	      | user-set-password-extra | 
	      http://marklogic.com/xdmp/privileges/user-set-password-extra | 
	      privilege to set the password-extra element in the user document | 
	      sec:user-set-password-extra | 
	    
	      | user-set-roles | 
	      http://marklogic.com/xdmp/privileges/user-set-roles | 
	      privilege to set a user's role | 
	      sec:user-set-roles | 
	    
	      | view-create | 
	      http://marklogic.com/xdmp/privileges/create-view | 
	      privilege to create a view  | 
	      view:create | 
	    
	      | view-schema-create | 
	      http://marklogic.com/xdmp/privileges/create-schema | 
	      privilege to create a relational schema | 
	      view:schema-create | 
	    
	      | xdbc-eval | 
	      http://marklogic.com/xdmp/privileges/xdbc-eval | 
	      privilege to execute eval statements from xcc or xdbc | 
	      xdmp:eval | 
	    
	      | xdbc-eval-in | 
	      http://marklogic.com/xdmp/privileges/xdbc-eval-in | 
	      privilege to execute eval-in statements from xcc or xdbc | 
	      xdmp:eval-in | 
	    
	      | xdbc-eval-modules-change | 
	      http://marklogic.com/xdmp/privileges/xdbc-eval-modules-change | 
	      privilege to execute eval statements that change a modules database from xcc or xdbc | 
	      xdmp:eval | 
	    
	      | xdbc-eval-modules-change-file | 
	      http://marklogic.com/xdmp/privileges/xdbc-eval-modules-change-file | 
	      privilege to execute eval statements that change a filesystem root from xcc or xdbc | 
	      xdmp:eval | 
	    
	      | xdbc-insert | 
	      http://marklogic.com/xdmp/privileges/xdbc-insert-in | 
	      privilege to execute insert statements from xcc or xdbc | 
	      xcc or xdbc inserts | 
	    
	      | xdbc-insert-in | 
	      http://marklogic.com/xdmp/privileges/xdbc-insert-in | 
	      privilege to execute insert statements from xcc or xdbc | 
	      xdbc or xcc inserts into another database | 
	    
	      | xdbc-invoke | 
	      http://marklogic.com/xdmp/privileges/xdbc-invoke | 
	      privilege to execute invoke statements from xcc or xdbc | 
	      xdbc or xcc invokes | 
	    
	      | xdbc-invoke-in | 
	      http://marklogic.com/xdmp/privileges/xdbc-invoke-in | 
	      privilege to execute invoke statements from xcc or xdbc | 
	      xdbc or xcc invokes into another database | 
	    
	      | xdbc-invoke-modules-change | 
	      http://marklogic.com/xdmp/privileges/xdbc-invoke-modules-change | 
	      privilege to execute invoke statements that change a modules database from xcc or xdbc | 
	      xdbc or xcc invokes that change the modules database | 
	    
	      | xdbc-invoke-modules-change-file | 
	      http://marklogic.com/xdmp/privileges/xdbc-invoke-modules-change-file | 
	      privilege to execute invoke statements that change a filesystem root from xcc or xdbc | 
	      xdbc or xcc invokes that change the filesystem root | 
	    
	      | xdbc-spawn | 
	      http://marklogic.com/xdmp/privileges/xdbc-spawn | 
	      privilege to execute spawn statements from xcc or xdbc | 
	      xdbc or xcc spawns | 
	    
	      | xdbc-spawn-in | 
	      http://marklogic.com/xdmp/privileges/xdbc-spawn-in | 
	      privilege to execute spawn statements from xcc or xdbc | 
	      xdbc or xcc spawns into another database | 
	    
	      | xdbc-spawn-modules-change | 
	      http://marklogic.com/xdmp/privileges/xdbc-spawn-modules-change | 
	      privilege to execute spawn statements that change a modules database from xcc or xdbc | 
	      xdbc or xcc spawn that change the modules database | 
	    
	      | xdbc-spawn-modules-change-file | 
	      http://marklogic.com/xdmp/privileges/xdbc-spawn-modules-change-file | 
	      privilege to execute spawn statements that change a filesystem root from xcc or xdbc | 
	      xdbc or xcc spawn that change the filesystem root | 
	    
	      | xdmp-add-response-header | 
	      http://marklogic.com/xdmp/privileges/xdmp-add-response-header | 
	      privilege to use the function that adds a response header to a request functions. | 
	      admin built-ins, alert-user | 
	    
	      | xdmp-address-bindable | 
	      http://marklogic.com/xdmp/privileges/xdmp-address-bindable | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-alert-admin | 
	      http://marklogic.com/xdmp/privileges/xdmp-alert-admin | 
	      privilege to perform alerting admin functions. | 
	      xdmp:alert-admin | 
	    
	      | xdmp-alert-internal | 
	      http://marklogic.com/xdmp/privileges/xdmp-alert-internal | 
	      privilege used by the Alerting API functions. | 
	      xdmp:alert-internal | 
	    
	      | xdmp-alert-user | 
	      http://marklogic.com/xdmp/privileges/xdmp-alert-user | 
	      privilege to perform user-level Alerting functions. | 
	      xdmp:alert-user, 
xdmp:alert-admin | 
	    
	      | xdmp-amp-roles | 
	      http://marklogic.com/xdmp/privileges/xdmp-amp-roles | 
	      privilege to get an amp's roles | 
	      xdmp:amp-roles | 
	    
	      | xdmp-binary-join | 
	      http://marklogic.com/xdmp/privileges/xdmp-binary-join | 
	      privilege to run the binary-join built-n | 
	      xdmp:binary-join | 
	    
	      | xdmp-compressed-tree-cache-partitions | 
	      http://marklogic.com/xdmp/privileges/xdmp-compressed-tree-cache-partitions | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-compressed-tree-cache-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-compressed-tree-cache-size | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-data-directory | 
	      http://marklogic.com/xdmp/privileges/xdmp-data-directory | 
	      privilege to access the data directory | 
	      admin built-ins | 
	    
	      | xdmp-database-backup | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-backup | 
	      privilege to perform a database backup | 
	      admin built-ins | 
	    
	      | xdmp-database-backup-cancel | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-backup-cancel | 
	      privilege to cancel a database backup | 
	      admin built-ins | 
	    
	      | xdmp-database-backup-purge | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-backup-purge | 
	      privilege to get purge a database backup | 
	      admin built-ins | 
	    
	      | xdmp-database-backup-status | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-backup-status | 
	      privilege to get status for a database backup | 
	      admin built-ins | 
	    
	      | xdmp-database-backup-validate | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-backup-validate | 
	      privilege to validate a database backup | 
	      admin built-ins | 
	    
	      | xdmp-database-create-sub-database | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-create-sub-database | 
	      privilege to create a sub database | 
	      tieredstorage:database-create-sub-database | 
	    
	      | xdmp-database-create-super-database | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-create-super-database | 
	      privilege to create a super database | 
	      tieredstorage:database-create-super-database | 
	    
	      | xdmp-database-delete-sub-database | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-delete-sub-database | 
	      privilege to delete a sub database | 
	      tieredstorage:database-delete-sub-database | 
	    
	      | xdmp-database-delete-super-database | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-delete-super-database | 
	      privilege to delete a super database | 
	      tieredstorage:database-delete-super-database | 
	    
	      | xdmp-database-incremental-backup | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-incremental-backup | 
	      privilege to validate if forests can be incrementally backed up  | 
	      xdmp:database-incremental-backup | 
	    
	      | xdmp-database-incremental-backup-validate | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-incremental-backup-validate | 
	      privilege to start an incremental backup of forests | 
	      xdmp:database-incremental-backup-validate | 
	    
	      | xdmp-database-restore | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-restore | 
	      privilege to perform a database restore | 
	      admin built-ins | 
	    
	      | xdmp-database-restore-cancel | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-backup | 
	      privilege to cancel a database restore | 
	      admin built-ins | 
	    
	      | xdmp-database-restore-status | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-restore-status | 
	      privilege to get status for a database restore | 
	      admin built-ins | 
	    
	      | xdmp-database-restore-validate | 
	      http://marklogic.com/xdmp/privileges/xdmp-database-restore-validate | 
	      privilege to validate a database restore | 
	      admin built-ins | 
	    
	      | xdmp-default-in-memory-geospatial-region-index-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-geospatial-region-index-size | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-default-in-memory-limit | 
	      http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-limit | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-default-in-memory-list-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-list-size | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-default-in-memory-range-
index-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-range-index-size | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-default-in-memory-reverse-index-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-reverse-index-size | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-default-in-memory-tree-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-tree-size | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-default-in-memory-triple-index-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-default-in-memory-triple-index-size | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-default-journal-count | 
	      http://marklogic.com/xdmp/privileges/xdmp-default-journal-count | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-default-journal-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-default-journal-size | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-default-preallocate-journals | 
	      http://marklogic.com/xdmp/privileges/xdmp-default-preallocate-journals | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-default-s3-domain | 
	      http://marklogic.com/xdmp/privileges/xdmp-default-s3-domain | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-assignments | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/assignments.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-ca-bundle | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/ca-bundle.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-calendars | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/calendars.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-clusters | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/clusters.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-countries | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/countries.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-databases | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/databases.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-dtfmt-langauges | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/dtfmt-languages.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-groups | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/groups.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-hosts | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/hosts.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-keystore | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/keystore.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-languages | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/languages.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-mimetypes | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/mimetypes.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-security | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/security.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-server | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/server.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-tokenizer | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/tokenizer.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-cluster-config-file-user-languages | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-cluster-config-file/user-languages.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-assignments | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/assignments.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-ca-bundle | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/ca-bundle.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-calendars | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/calendars.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-clusters | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/clusters.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-countries | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/countries.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-databases | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/databases.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-dtfmt-langauges | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/dtfmt-languages.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-groups | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/groups.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-hosts | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/hosts.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-keystore | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/keystore.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-languages | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/languages.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-mimetypes | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/mimetypes.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-security | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/security.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-server | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/server.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-tokenizer | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/tokenizer.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-delete-host-config-file-user-languages | 
	      http://marklogic.com/xdmp/privileges/xdmp-delete-host-config-file/user-languages.xml | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-disable-event | 
	      http://marklogic.com/xdmp/privileges/xdmp-disable-event | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-document-get | 
	      http://marklogic.com/xdmp/privileges/xdmp-document-get | 
	      privilege to execute function | 
	      xdmp:document-get | 
	    
	      | xdmp-document-load | 
	      http://marklogic.com/xdmp/privileges/xdmp-document-load | 
	      privilege to execute function | 
	      xdmp:document-load | 
	    
	      | xdmp-email | 
	      http://marklogic.com/xdmp/privileges/xdmp-email | 
	      privilege to email | 
	      xdmp:email | 
	    
	      | xdmp-email-address | 
	      http://marklogic.com/xdmp/privileges/xdmp-email-address | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-enable-event | 
	      http://marklogic.com/xdmp/privileges/xdmp-enable-event | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-eval | 
	      http://marklogic.com/xdmp/privileges/xdmp-eval | 
	      privilege to perform eval functions | 
	      xdmp:eval | 
	    
	      | xdmp-eval-in | 
	      http://marklogic.com/xdmp/privileges/xdmp-eval-in | 
	      privilege to perform eval-in functions | 
	      xdmp:eval-in | 
	    
	      | xdmp-eval-modules-change | 
	      http://marklogic.com/xdmp/privileges/xdmp-eval-modules-change | 
	      privilege to execute eval statements that change a modules database | 
	      xdmp:eval statements that change the modules database | 
	    
	      | xdmp-eval-modules-change-file | 
	      http://marklogic.com/xdmp/privileges/xdmp-eval-modules-change-file | 
	      privilege to execute eval statements that change a filesystem root | 
	      xdmp:eval statements that change the filesystem root | 
	    
	      | xdmp-eval-transaction | 
	      http://marklogic.com/xdmp/privileges/xdmp-eval-transaction | 
	      privilege to run eval statements with the transaction option | 
	      xdmp:eval statements that start a new transaction | 
	    
	      | xdmp-expanded-tree-cache-partitions | 
	      http://marklogic.com/xdmp/privileges/xdmp-expanded-tree-cache-partitions | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-expanded-tree-cache-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-expanded-tree-cache-size | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-external-binary | 
	      http://marklogic.com/xdmp/privileges/xdmp-external-binary | 
	      privilege to access external binary function | 
	      xdmp:external-binary | 
	    
	      | xdmp-filesystem-directory | 
	      http://marklogic.com/xdmp/privileges/xdmp-filesystem-directory | 
	      privilege to run the built-in | 
	      xdmp:filesystem-directory | 
	    
	      | xdmp-filesystem-directory-create | 
	      http://marklogic.com/xdmp/privileges/xdmp-filesystem-directory-create | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-filesystem-directory-delete | 
	      http://marklogic.com/xdmp/privileges/xdmp-filesystem-directory-delete | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-filesystem-file | 
	      http://marklogic.com/xdmp/privileges/xdmp-filesystem-file | 
	      privilege to perform admin functions | 
	      xdmp:filesystem-file | 
	    
	      | xdmp-filesystem-file-delete | 
	      http://marklogic.com/xdmp/privileges/xdmp-filesystem-file-delete | 
	      privilege to perform admin functions. | 
	      admin built-ins | 
	    
	      | xdmp-filesystem-file-exists | 
	      http://marklogic.com/xdmp/privileges/xdmp-filesystem-file-exists | 
	      privilege to run the built-in | 
	      xdmp:filesystem-file-exists  | 
	    
	      | xdmp-filesystem-file-get-time | 
	      http://marklogic.com/xdmp/privileges/xdmp-filesystem-file-get-time | 
	      privilege to perform admin functions. | 
	      xdmp:filesystem-file-get-time | 
	    
	      | xdmp-filesystem-file-length | 
	      http://marklogic.com/xdmp/privileges/xdmp-filesystem-file-length | 
	      privilege to run the built-in | 
	      xdmp:filesystem-file-length | 
	    
	      | xdmp-forest-backup | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-backup | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-forest-clear | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-clear | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-forest-combine | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-combine | 
	      privilege to perform admin functions | 
	      admin built-in | 
	    
	      | xdmp-forest-copy | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-copy | 
	      privilege to perform admin functions | 
	      admin built-in | 
	    
	      | xdmp-forest-delete | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-delete | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-forest-directory-delete | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-directory-delete | 
	      privilege to perform admin functions | 
	      admin built-in | 
	    
	      | xdmp-forest-directory-exists | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-directory-exists | 
	      privilege to perform admin functions | 
	      admin built-in | 
	    
	      | xdmp-forest-get-readonly | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-get-readonly | 
	      privilege to perform admin functions | 
	      admin built-in | 
	    
	      | xdmp-forest-rename | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-rename | 
	      privilege to perform admin functions | 
	      admin built-in | 
	    
	      | xdmp-forest-restart | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-restart | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-forest-restore | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-restore | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-forest-rollback | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-rollback | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-forest-set-readonly | 
	      http://marklogic.com/xdmp/privileges/xdmp-forest-set-readonly | 
	      privilege to perform admin functions | 
	      admin built-in | 
	    
	      | xdmp-get | 
	      http://marklogic.com/xdmp/privileges/xdmp-get | 
	      privilege to get a document into memory | 
	      xdmp:get | 
	    
	      | xdmp-get-forest-keys | 
	      http://marklogic.com/xdmp/privileges/xdmp-get-forest-keys | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-get-hot-updates | 
	      http://marklogic.com/xdmp/privileges/xdmp-get-hot-updates | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-get-orphaned-binaries | 
	      http://marklogic.com/xdmp/privileges/xdmp-get-orphaned-binaries | 
	      privilege to run the built-in | 
	      xdmp:get-orphaned-binaries | 
	    
	      | xdmp-get-server-field | 
	      http://marklogic.com/xdmp/privileges/xdmp-get-server-field | 
	      privilege to get server fields | 
	      xdmp:get-server-field | 
	    
	      | xdmp-get-server-field-names | 
	      http://marklogic.com/xdmp/privileges/xdmp-get-server-field-names | 
	      privilege to get server fields names | 
	      xdmp:get-server-field-names | 
	    
	      | xdmp-get-session-field | 
	      http://marklogic.com/xdmp/privileges/xdmp-get-session-field | 
	      privilege to get session fields | 
	      xdmp:get-session-field | 
	    
	      | xdmp-get-session-field-names | 
	      http://marklogic.com/xdmp/privileges/xdmp-get-session-field-names | 
	      privilege to get session field names | 
	      xdmp:get-session-field-names | 
	    
	      | xdmp-getenv | 
	      http://marklogic.com/xdmp/privileges/xdmp-getenv | 
	      privilege to perform admin function | 
	      admin built-ins | 
	    
	      | xdmp-host-cores | 
	      http://marklogic.com/xdmp/privileges/xdmp-host-cores | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-host-cpus | 
	      http://marklogic.com/xdmp/privileges/xdmp-host-cpus | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-host-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-host-size | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-hostname | 
	      http://marklogic.com/xdmp/privileges/xdmp-hostname | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-http-get | 
	      http://marklogic.com/xdmp/privileges/xdmp-http-get | 
	      privilege to perform http function | 
	      xdmp:http-get | 
	    
	      | xdmp-http-head | 
	      http://marklogic.com/xdmp/privileges/xdmp-http-head | 
	      privilege to perform http function | 
	      xdmp:http-head | 
	    
	      | xdmp-http-options | 
	      http://marklogic.com/xdmp/privileges/xdmp-http-options | 
	      privilege to perform http function | 
	      xdmp:http-options | 
	    
	      | xdmp-http-delete | 
	      http://marklogic.com/xdmp/privileges/xdmp-http-delete | 
	      privilege to perform http function | 
	      xdmp:http-delete | 
	    
	      | xdmp-http-post | 
	      http://marklogic.com/xdmp/privileges/xdmp-http-post | 
	      privilege to perform http function | 
	      xdmp:http-post | 
	    
	      | xdmp-http-put | 
	      http://marklogic.com/xdmp/privileges/xdmp-http-put | 
	      privilege to perform http function | 
	      xdmp:http-put | 
	    
	      | xdmp-install-directory | 
	      http://marklogic.com/xdmp/privileges/xdmp-install-directory | 
	      privilege to access the installation directory | 
	      admin built-ins | 
	    
	      | xdmp-invoke | 
	      http://marklogic.com/xdmp/privileges/xdmp-invoke | 
	      privilege to perform invoke functions | 
	      xdmp:invoke | 
	    
	      | xdmp-invoke-in | 
	      http://marklogic.com/xdmp/privileges/xdmp-invoke-in | 
	      privilege to perform invoke-in functions | 
	      xdmp:invoke-in | 
	    
	      | xdmp-invoke-modules-change | 
	      http://marklogic.com/xdmp/privileges/xdmp-invoke-modules-change | 
	      privilege to execute invoke statements that change a modules database | 
	      xdmp:invoke statements that change the modules database | 
	    
	      | xdmp-invoke-modules-change-file | 
	      http://marklogic.com/xdmp/privileges/xdmp-invoke-modules-change-file | 
	      privilege to execute invoke statements that change a filesystem root | 
	      xdmp:invoke statements that change the filesystem root | 
	    
	      | xdmp-invoke-transaction | 
	      http://marklogic.com/xdmp/privileges/xdmp-invoke-transaction | 
	      privilege to execute invoke statements that have the <transaction-id> option | 
	      xdmp:invoke | 
	    
	      | xdmp-license-accepted | 
	      http://marklogic.com/xdmp/privileges/xdmp-license-accepted | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-license-fee | 
	      http://marklogic.com/xdmp/privileges/xdmp-license-fee | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-license-key | 
	      http://marklogic.com/xdmp/privileges/xdmp-license-key | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-license-key-agreement | 
	      http://marklogic.com/xdmp/privileges/xdmp-license-key-agreement | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-license-key-cores | 
	      http://marklogic.com/xdmp/privileges/xdmp-license-key-cores | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-license-key-cpus | 
	      http://marklogic.com/xdmp/privileges/xdmp-license-key-cpus | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-license-key-decode | 
	      http://marklogic.com/xdmp/privileges/xdmp-license-key-decode | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-license-key-encode | 
	      http://marklogic.com/xdmp/privileges/xdmp-license-key-encode | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-license-key-expires | 
	      http://marklogic.com/xdmp/privileges/xdmp-license-key-expires | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-license-key-options | 
	      http://marklogic.com/xdmp/privileges/xdmp-license-key-options | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-license-key-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-license-key-size | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-license-key-valid | 
	      http://marklogic.com/xdmp/privileges/xdmp-license-key-valid | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-licensee | 
	      http://marklogic.com/xdmp/privileges/xdmp-licensee | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-list-cache-partitions | 
	      http://marklogic.com/xdmp/privileges/xdmp-list-cache-partitions | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-list-cache-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-list-cache-size | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-load | 
	      http://marklogic.com/xdmp/privileges/xdmp-load | 
	      privilege needed to load a document from the file system | 
	      xdmp:load | 
	    
	      | xdmp-login | 
	      http://marklogic.com/xdmp/privileges/xdmp-login | 
	      privilege to log in a user without the corresponding password | 
	      xdmp-login | 
	    
	      | xdmp-merge | 
	      http://marklogic.com/xdmp/privileges/xdmp-merge | 
	      privilege to start merging the forests | 
	      xdmp-merge | 
	    
	      | xdmp-merging | 
	      http://marklogic.com/xdmp/privileges/xdmp-merging | 
	      privilege to get forest ids of forests currently merging | 
	      xdmp:merging | 
	    
	      | xdmp-missing-directories | 
	      http://marklogic.com/xdmp/privileges/xdmp-missing-directories | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-plan | 
	      http://marklogic.com/xdmp/privileges/xdmp-plan | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-pre-release-expires | 
	      http://marklogic.com/xdmp/privileges/xdmp-pre-release-expires | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-privilege-roles | 
	      http://marklogic.com/xdmp/privileges/xdmp-privilege-roles | 
	      privilege needed to get a role's privileges | 
	      xdmp:privilege-roles | 
	    
	      | xdmp-read-cluster-config-file | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-assignments | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/assignments.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-assignments-schema | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/assignments.xsd | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-ca-bundle | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/ca-bundle.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-calendars | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/calendars.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-clusters | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/clusters.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-clusters-schema | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/clusters.xsd | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-countries | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/countries.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-database-schema | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/database.xsd | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-databases | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/databases.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-dtfmt-langauges | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/dtfmt-languages.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-group-schema | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/group.xsd | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-groups | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/groups.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-host-schema | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/hosts.xsd | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-hosts | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/hosts.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-keystore | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/keystore.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-keystore-schema | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/keystore.xsd | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-languages | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/languages.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-mimetypes | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/mimetypes.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-mimetypes-schema | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/mimetypes.xsd | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-security | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/security.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-server | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/server.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-tokenizer | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/tokenizer.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-cluster-config-file-user-languages | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-cluster-config-file/user-languages.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-assignments | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/assignments.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-ca-bundle | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/ca-bundle.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-calendars | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/calendars.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-clusters | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/clusters.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-countries | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/countries.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-databases | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/databases.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-dtfmt-langauges | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/dtfmt-languages.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-groups | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/groups.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-hosts | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/hosts.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-keystore | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/keystore.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-languages | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/languages.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-mimetypes | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/mimetypes.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-security | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/security.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-server | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/server.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-tokenizer | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/tokenizer.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-read-host-config-file-user-languages | 
	      http://marklogic.com/xdmp/privileges/xdmp-read-host-config-file/user-languages.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-remove-orphaned-binary | 
	      http://marklogic.com/xdmp/privileges/xdmp-remove-orphaned-binary | 
	      privilege to run the built-in | 
	      xdmp:remove-orphaned-binary | 
	    
	      | xdmp-restart | 
	      http://marklogic.com/xdmp/privileges/xdmp-restart | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-role-roles | 
	      http://marklogic.com/xdmp/privileges/xdmp-role-roles | 
	      privilege to get a role's roles | 
	      xdmp:role-roles | 
	    
	      | xdmp-rotate-log-files | 
	      http://marklogic.com/xdmp/privileges/xdmp-rotate-log-files | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-save | 
	      http://marklogic.com/xdmp/privileges/xdmp-save | 
	      privilege needed to save a document to the file system | 
	      xdmp:save | 
	    
	      | xdmp-server-backup | 
	      http://marklogic.com/xdmp/privileges/xdmp-server-backup | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-server-import-qualities | 
	      http://marklogic.com/xdmp/privileges/xdmp-server-import-qualities | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-server-restore | 
	      http://marklogic.com/xdmp/privileges/xdmp-server-restore | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-set-current-transaction | 
	      http://marklogic.com/xdmp/privileges/set-current-transaction | 
	      privilege to perfrom the multi-statement transaction function | 
	      xdmp:set-current-transaction | 
	    
	      | xdmp-set-hot-updates | 
	      http://marklogic.com/xdmp/privileges/xdmp-set-hot-updates | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-set-request-time-limit | 
	      http://marklogic.com/xdmp/privileges/xdmp-set-request-time-limit | 
	      privilege to set time limits for a request | 
	      xdmp:set-request-time-limit | 
	    
	      | xdmp-set-server-field | 
	      http://marklogic.com/xdmp/privileges/xdmp-set-server-field | 
	      privilege to set a server fields | 
	      xdmp:set-server-field | 
	    
	      | xdmp-set-server-field-privilege | 
	      http://marklogic.com/xdmp/privileges/xdmp-set-server-field-privilege | 
	      privilege to set a specific privilege on a server field | 
	      xdmp:set-server-field-privilege | 
	    
	      | xdmp-set-session-field | 
	      http://marklogic.com/xdmp/privileges/xdmp-set-session-field | 
	      privilege to run the built-in | 
	      xdmp:set-session-field  | 
	    
	      | xdmp-shutdown | 
	      http://marklogic.com/xdmp/privileges/xdmp-shutdown | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-sleep | 
	      http://marklogic.com/xdmp/privileges/xdmp-sleep | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-smtp-relay | 
	      http://marklogic.com/xdmp/privileges/xdmp-smtp-relay | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-spawn | 
	      http://marklogic.com/xdmp/privileges/xdmp-spawn | 
	      privilege to perform spawn functions | 
	      xdmp:spawn | 
	    
	      | xdmp-spawn-in | 
	      http://marklogic.com/xdmp/privileges/xdmp-spawn-in | 
	      privilege to perform spawn-in functions | 
	      xdmp:spawn-in | 
	    
	      | xdmp-spawn-modules-change | 
	      http://marklogic.com/xdmp/privileges/xdmp-spawn-modules-change | 
	      privilege to execute spawn statements that change a modules database | 
	      xdmp:spawn statements that change the modules database | 
	    
	      | xdmp-spawn-modules-change-file | 
	      http://marklogic.com/xdmp/privileges/xdmp-spawn-modules-change-file | 
	      privilege to execute spawn statements that change a filesystem root | 
	      xdmp:spawn statements that change the filesystem root | 
	    
	      | xdmp-spawn-transaction | 
	      http://marklogic.com/xdmp/privileges/xdmp-spawn-transaction | 
	      privilege to execute spawn statements that have the <transaction-id> option | 
	      xsmp:spawn | 
	    
	      | xdmp-sql | 
	      http://marklogic.com/xdmp/privileges/xdmp-sql | 
	      privilege to perform SQL queries | 
	      xdmp:sql | 
	    
	      | xdmp-timestamp | 
	      http://marklogic.com/xdmp/privileges/xdmp-timestamp | 
	      privilege to perform point-in-time queries | 
	      xdmp:eval, xdmp:invoke (timestamp option) | 
	    
	      | xdmp-transaction-create | 
	      http://marklogic.com/xdmp/privileges/xdmp-transaction-create | 
	      privilege to run the built-in | 
	      xdmp:transaction-create | 
	    
	      | xdmp-transaction-create-xid | 
	      http://marklogic.com/xdmp/privileges/xdmp-transaction-create-xid | 
	      privilege to run the built-in | 
	      xdmp:transaction-create-xid | 
	    
	      | xdmp-triple-cache-partitions | 
	      http://marklogic.com/xdmp/privileges/xdmp-triple-cache-partitions | 
	      privilege to run the built-in | 
	      admin built-ins | 
	    
	      | xdmp-triple-cache-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-triple-cache-size | 
	      privilege to run the built-in | 
	      admin built-ins | 
	    
	      | xdmp-triple-value-cache-partitions | 
	      http://marklogic.com/xdmp/privileges/xdmp-triple-value-cache-partitions | 
	      privilege to run the built-in | 
	      admin built-ins | 
	    
	      | xdmp-triple-value-cache-size | 
	      http://marklogic.com/xdmp/privileges/xdmp-triple-value-cache-size | 
	      privilege to run the built-in | 
	      admin built-ins | 
	    
	      | xdmp-user-last-login | 
	      http://marklogic.com/xdmp/privileges/xdmp-user-last-login | 
	      privilege to get run the built-in | 
	      xdmp:user-last-login | 
	    
	      | xdmp-user-roles | 
	      http://marklogic.com/xdmp/privileges/xdmp-user-roles | 
	      privilege to get a user's roles | 
	      xdmp:user-roles | 
	    
	      | xdmp-username | 
	      http://marklogic.com/xdmp/privileges/xdmp-username | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-value | 
	      http://marklogic.com/xdmp/privileges/xdmp-value | 
	      privilege to use the evaluate an expression function | 
	      xdmp:value | 
	    
	      | xdmp-with-namespace | 
	      http://marklogic.com/xdmp/privileges/xdmp-with-namespace | 
	      privilege to use the evaluate an expression preserving the namespace function | 
	      xdmp:with-namespace | 
	    
	      | xdmp-write-cluster-config-file | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-assignments | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/assignments.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-ca-bundle | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/ca-bundle.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-calendars | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/calendars.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-clusters | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/clusters.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-countries | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/countries.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-databases | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/databases.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-dtfmt-langauges | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/dtfmt-languages.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-groups | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/groups.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-hosts | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/hosts.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-keystore | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/keystore.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-languages | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/languages.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-mimetypes | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/mimetypes.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-security | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/security.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-server | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/server.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-tokenizer | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/tokenizer.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-cluster-config-file-user-languages | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-cluster-config-file/user-languages.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-assignments | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/assignments.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-ca-bundle | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/ca-bundle.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-calendars | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/calendars.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-clusters | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/clusters.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-countries | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/countries.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-databases | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/databases.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-dtfmt-langauges | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/dtfmt-languages.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-groups | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/groups.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-hosts | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/hosts.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-keystore | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/keystore.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-languages | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/languages.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-mimetypes | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/mimetypes.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-security | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/security.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-server | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/server.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-tokenizer | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/tokenizer.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-write-host-config-file-user-languages | 
	      http://marklogic.com/xdmp/privileges/xdmp-write-host-config-file/user-languages.xml | 
	      privilege to perform admin functions | 
	      admin built-ins | 
	    
	      | xdmp-xslt-eval | 
	      http://marklogic.com/xdmp/privileges/xslt-eval | 
	      privilege to use xdmp:xslt-eval | 
	      xdmp:xslt-eval | 
	    
	      | xdmp-xslt-eval-in | 
	      http://marklogic.com/xdmp/privileges/xslt-eval-in | 
	      privilege to use xdmp:xslt-eval-in | 
	      xdmp:xslt-eval-in | 
	    
	      | xdmp-xslt-eval-modules-change | 
	      http://marklogic.com/xdmp/privileges/xslt-eval-modules-change | 
	      privilege to change the modules database for xdmp:xslt-eval | 
	      xdmp:xslt-eval | 
	    
	      | xdmp-xslt-eval-modules-change-file | 
	      http://marklogic.com/xdmp/privileges/xslt-eval-modules-change-file | 
	      privilege to change the filesystem root for xdmp:xslt-eval | 
	      <xdmp:xslt-eval | 
	    
	      | xdmp-xslt-eval-transaction | 
	      http://marklogic.com/xdmp/privileges/xslt-eval-transaction | 
	      privilege to execute xdmp:xslt-eval statements that have the <transaction-id> option | 
	      xdmp:xslt-eval | 
	    
	      | xdmp-xslt-invoke | 
	      http://marklogic.com/xdmp/privileges/xslt-invoke | 
	      privilege to use xdmp:xslt-invoke | 
	      xdmp:xslt-invoke | 
	    
	      | xdmp-xslt-invoke-in | 
	      http://marklogic.com/xdmp/privileges/xslt-invoke-in | 
	      privilege to use xdmp:xslt-invoke-in | 
	      xdmp:xslt-invoke-in | 
	    
	      | xdmp-xslt-invoke-modules-change | 
	      http://marklogic.com/xdmp/privileges/xslt-invoke-modules-change | 
	      privilege to use xdmp:xslt-invoke and change the modules database | 
	      xdmp:xslt-invoke | 
	    
	      | xdmp-xslt-invoke-modules-change-file | 
	      http://marklogic.com/xdmp/privileges/xslt-invoke-modules-change-file | 
	      privilege to use xdmp:xslt-invoke and change the App Server root | 
	      xdmp:xslt-invoke | 
	    
	      | xdmp-xslt-invoke-transaction | 
	      http://marklogic.com/xdmp/privileges/xslt-invoke-transaction | 
	      privilege to execute xdmp:xslt-invoke statements that have the <transaction-id> option | 
	      xdmp:xslt-invoke |