What rights do I need to grant to our help desk staff clients so they can
move a user object from one container (ex. corp.company1) to another
subcontainer (disabledaccts.corp.company)? Obviously i'd want to only
give them enough access to do a move and nothing more if possible.