[ovirt-users] what permissions to use for Affinity Rules/Groups?

I didn’t see any info in the Admin Guide for what permissions would allow users to setup Affinity Groups & Rules for the VMs they have access to. Anyone know what permissions are needed where to allow that? Thanks, -Darrell