To modify access control definitions in the server, a user must have the modify-acl privilege.