try to give your user that role and see if you can do it from user interface, it might tell you the one you misss