Web, client, and privileged routines can escalate the roles of a user once they have been authenticated and assigned their initial authorization. This minimizes initial privileges and gives the application complete control over the resources it uses.