sysenv

privilege::sysenv requests the system environment privilege (SeSystemEnvironmentPrivilege).

Required to modify the nonvolatile RAM of systems that use this type of memory to store configuration information.

User Right: Modify firmware environment values.

(docs.microsoft.com)

mimikatz # privilege::sysenv
Privilege '22' OK