Can be used to mark code as being "privileged", thus affecting subsequent access determinations

Can be to decide whether an access to a critical system resource is to be allowed or denied, based on the security policy currently in effect

Can be used to obtain a "snapshot" of the current calling context

Can be used to compute a cryptographically secure hash