You can modify these supplementary rights by adding or removing privileges. When a right with additional supplementary privileges is assigned to a user or role, those added privileges become available as explicit privileges that can be specified in the -P option of pfexec(1). This allows users to invoke any command in their set of rights with any of these additional privileges.