Many common administration tasks require a coordinated set of privileges. Some operations require permission at the root folder in addition to access to the object that is being manipulated.