diff --git a/sql/database-create.sql b/sql/database-create.sql
index 080a858fc0eaed65a4317cfea94a5e0592d01544..956e295569a43d9acea1ae146feaa4d8afecdeb4 100644
--- a/sql/database-create.sql
+++ b/sql/database-create.sql
@@ -3630,6 +3630,7 @@ CREATE TABLE `nonlocal_user_accounts` (
   `unix_uid` smallint(5) unsigned NOT NULL auto_increment,
   `created` datetime default NULL,
   `updated` datetime default NULL,
+  `privs` enum('user','local_root') default 'local_root',
   `urn` tinytext,
   `name` tinytext,
   `email` tinytext,
diff --git a/sql/updates/4/588 b/sql/updates/4/588
new file mode 100644
index 0000000000000000000000000000000000000000..0b7d31d3cd5067194df1c6e47833d5785c52af6d
--- /dev/null
+++ b/sql/updates/4/588
@@ -0,0 +1,18 @@
+use strict;
+use libdb;
+
+sub DoUpdate($$$)
+{
+    my ($dbhandle, $dbname, $version) = @_;
+
+    if (!DBSlotExists("nonlocal_user_accounts", "privs")) {
+        DBQueryFatal("alter table nonlocal_user_accounts add " .
+		     " `privs` enum('user','local_root') default 'local_root' ".
+		     "    after updated");
+    }
+    return 0;
+}
+
+# Local Variables:
+# mode:perl
+# End: