iControl REST Permissions to enable/disable pool member

I have found the answer. Turns out that when I used the PATCH command when calling the API, the calls work. Apparently admin access is such that it doesn't matter if it's a PUT or a PATCH but non-admin access is different. Note that I did have PUT in the "restMethod" and in the API call but that didn't work. Having PATCH in the role and using PATCH for the API did it. That lightbulb didn't come on for me until I made the above post and thought about it some more.

I hope this helps someone else.