The administrative account that the gateway runs under must be authorized for all operations defined in the scripts.