The calling process needs the proc_setid privilege in its effective set to change its user ID, group ID, or supplemental group ID.
