The NIS+ principal performing this operation must have modify rights to the domain's directory object.
