It's detailed out in the link I had shared above on what is needed.
I'd test with the permission suggested there and see how it works.