Failed to delete share level ACL on a CIFS share from OSM with a custom user

• ONTAP 9
• REST API
• ONTAP System Manager (OSM)

• Failed to delete ACLs on a CIFS share from OSM via REST API call
• The user has roles as:

1. /api    None
2. /api/protocols/cifs/shares    Read/Create/Modify
3. /api/security/roles    Read-Only

• REST API call DELETE /protocols/cifs/shares/{svm.uuid}/{share}/acls/{user_or_group}/{type} fails with "not authorized for that command"

"error": {
"message": "not authorized for that command",
"code": "6"
}