diff --git a/include/obmc_console.hpp b/include/obmc_console.hpp
index fac489a..cf90c0e 100644
--- a/include/obmc_console.hpp
+++ b/include/obmc_console.hpp
@@ -121,7 +121,7 @@
 inline void requestRoutes(App& app)
 {
     BMCWEB_ROUTE(app, "/console0")
-        .privileges({{"ConfigureComponents", "ConfigureManager"}})
+        .privileges({{"OpenBMCHostConsole"}})
         .websocket()
         .onopen(
             [](crow::websocket::Connection& conn) {
diff --git a/include/sessions.hpp b/include/sessions.hpp
index 6bb6a7a..26b3030 100644
--- a/include/sessions.hpp
+++ b/include/sessions.hpp
@@ -40,6 +40,8 @@
     std::chrono::time_point<std::chrono::steady_clock> lastUpdated;
     PersistenceType persistence{PersistenceType::TIMEOUT};
     bool isConfigureSelfOnly = false;
+    std::string userRole{};
+    std::vector<std::string> userGroups{};
 
     // There are two sources of truth for isConfigureSelfOnly:
     //  1. When pamAuthenticateUser() returns PAM_NEW_AUTHTOK_REQD.