You are missing the required rights for adding or removing the rights of an user.