The administrators and privileged users need to perform sensitive tasks, but because privileges are associated with processes, not user IDs (except for the special case of UID 0), it is not possible to directly grant privileges to users to perform these sensitive tasks.