When trying to call the method "Unsubscribe" from the table PersonWantsOrg from the API I can do this as viadmin, however when trying to do this authenticated using a windows AD account with pretty much every One Identity Manager Application Role assigned, we get the error {"responseStatus":{"errorCode":"Forbidden","message":"You are not allowed to call methods.","errors":[]}}
What permission/steps are required to grant a person/ad account the ability to call methods from PersonWantsOrg?