[Freeipa-users] Permission / privilege to unlock accounts

[Russell Long]

I'm trying to create a set of limited users who have the ability to unlock
all other user accounts and change their passwords.  I've got the password
portion figured out, however when a user with the limited permissions tries
to run the `unlock` operation they get the following message:

Insufficient access: Insufficient 'write' privilege to
the 'krbLoginFailedCount' attribute of entry...


I have attempted to create a permission granting this access, but it does
not appear to work.

I'll attach an image of the existing permission, not sure how the list will
handle the image.

--Russ