There are no user interfaces or APIs to the privilege service. The login facility and authenticated RPC or GSSAPI encapsulate interactions between a principal and the privilege service.