/PRIVILEGES=([NO]privname[,...])

    Specifies which privileges the user is authorized to hold,
    although these privileges are not necessarily enabled at login.
    (The /DEFPRIVILEGES qualifier determines which ones are enabled.)
    A NO prefix removes the privilege from the user. The keyword
    NOALL disables all user privileges. Many privileges have varying
    degrees of power and potential system impact (see the VSI OpenVMS
    Guide to System Security for a detailed discussion). By default,
    a user holds TMPMBX and NETMBX privileges. Privname is the name
    of the privilege.