SeAssignPrimaryTokenPrivilege gives service privilege to replace a process-level token.
Allows a parent process to replace the access token that is associated with a child process.
Default setting: Local Service and Network Service. Local System has the privilege inherently.