The restricted mode capabilities of the show privilege command are not correct. This command is available only to the SecurityAdmin role.