The key must have the following permissions:
read:usersread:users_app_metadataupdate:usersupdate:users_app_metadatadelete:userscreate:userscreate:users_app_metadataread:rolescreate:rolescreate:role_membersread:role_membersdelete:role_membersread:connections