I'm trying to create a set of limited users who have the ability to unlock all other user accounts and change their passwords. I've got the password portion figured out, however when a user with the limited permissions tries to run the `unlock` operation they get the following message:

Insufficient access: Insufficient 'write' privilege to the 'krbLoginFailedCount' attribute of entry...

I have attempted to create a permission granting this access, but it does not appear to work.

I'll attach an image of the existing permission, not sure how the list will handle the image.

--Russ