IDXML - Help with the rights for the "useerGroupsProfile" command

Question

On page 121-122 of the developer guide for CoreID - It mentions that in order to use the IDXML command for "userGroupsProfile" that the "The logged-in user must be able to grant read capability on the proxysourceuid classname attribute"
I am pretty sure this is the issue I am having using this command. I am passing valid DN's to it, but it keeps telling me it cannot find the user. My guess is that my service account making the request does not have the right to "grant read capability on the proxysourceuid classname attribute".
The other issue is that I have is I have no access to the CoreID admin to make this change / search the screens to find out exactly where to grant this right. I have to pass all requests for these kind of changes on to our CoreID admin (Who is also just learning to work with the system in this capacity.)
Any specific instructions on where we can change this "right" would be greatly appreciated. (Such as which admin screen / attributes need to be set and where).
Thanks again - -

Answer 1

From the CoreID screens, I can access both the user manager and group manager screens.
When I access the user manager, I can see all users... but cannot see what groups they are in.
When I access the group manager, I can see all groups. I can also see who is in each of the groups.
So it seems like I am missing the rights to jump from a user to the users memberships. When the absolute admin logs into those screens... they are able to do that.
IDXML Below:
<?xml version="1.0" ?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas-xmlsoap.org/soap/envelope/" xmlns:oblix="http://www.oblix.com">
     <SOAP-ENV:Body>
          <oblix:request application="groupservcenter" function="userGroupsProfile" mode="dataonly" version="NPWSDL1.0">
               <oblix:params>
                    <oblix:proxysourceuid>CN=Smith\, John,OU=Users,OU=ASDF,ou=oblixjoin,ou=vde,dc=vde,dc=mycompany,dc=com</oblix:proxysourceuid>
                    <oblix:showMemberOfGroups>true</oblix:showMemberOfGroups>
                    <oblix:showOwnerOfGroups>true</oblix:showOwnerOfGroups>
                    <oblix:showStaticGroups>true</oblix:showStaticGroups>
                    <oblix:showDynamicGroups>true</oblix:showDynamicGroups>
                    <oblix:showNestedGroups>true</oblix:showNestedGroups>
                    <oblix:showAdministratorOfGroups>true</oblix:showAdministratorOfGroups>
               </oblix:params>
          </oblix:request>
     </SOAP-ENV:Body>
</SOAP-ENV:Envelope>