Who establishes new permissions and privileges for current users?

New permissions and privileges for current users are typically established by system administrators or IT managers within an organization. They assess the needs of the users and the organization's security policies to determine appropriate access levels. This process often involves using a role-based access control (RBAC) model to ensure that users have the necessary permissions to perform their tasks while maintaining overall system security. Approval from relevant stakeholders may also be required before changes are implemented.