The user specified in the User DN resource parameter must have the ability to read, write, delete, and add users.
