SeAssignPrimaryTokenPrivilege

SeAssignPrimaryTokenPrivilege gives service privilege to replace a process-level token.

Allows a parent process to replace the access token that is associated with a child process.

Default setting: Local Service and Network Service. Local System has the privilege inherently.