crm privilege