eventType:group.privilege.grant OR eventType:user.account.privilege.grant