403 "Forbidden" when sending SMS

[cdupont]

$ curl -X POST "https://api.waziup.io/api/v2/socials" -H  "accept: text/plain;charset=utf-8" -H  "Content-Type: application/json;charset=utf-8" -d "{  \"channel\": \"sms\",  \"username\": \"cdupont\",  \"message\": \"Test message\"}" -v
HTTP/1.1 403 "Forbidden"

[cdupont]

It is solved by added role "realm-management/manage-user" to the group "waziup". However, with this role a user can change the settings of another user, of delete accounts...