You must have MAINTAIN_USERS privilege and be connected to the iidbdb database.