On the click of the button check if the user is the one you want to give authority to. This can go in two ways either hard code the value in the If statement in the button click (not recommended), or create a field in the table which will say what level of authority it has, then in the click of the button verify if this status is to grant permission.