User profile for iControl

Hi Everyone,

 

 

I'm now diving into iControl & Powershell and I have come of doubts:

 

 

What profile must have a user on TMOS to be able to execute commands using powershell & iControl?

 

 

A user with a "manager" rol asigned to an specific partition could alterobjects in otherpartitions?

 

 

Thanks in advance!!