NathanielOReilly

This seems to indicate that only read permissions are required however in order to disable an account you would need write permissions.