This feature exists and is called an AMP (temporary amplification of privileges)

1. Create a role with the extra execute priv, roles etc -but do not assign it to anyone
2. Create an AMP configuration - mapping a specific function to the new role. When the function is run, it will inherit the extra role.

Please note: For me, I always also make sure the the calling user is meant to have access to that function. This can be achieved with a en execute priv on the calling role and a security assert in the executed function.

Resources:

• Privileges Documentation
• AMP Documentation:
  • Source 1 -Security Section
  • Source 2 -configuration info from Admin interface
  • Source 3 - You tag Javascript, so There is some special information since the amp is applied on the export.