What privileges are reqired for HA Sync?

We created a dedicated partition for a load balancer in order to give access to pool management to an external company. They have Operator privilege on that partition. What else would they minimally need in order to sync their changes (basically enabling/disabling pool members) to the HA standby node?

 

 

Running BigIP v 12.1.3.6 VE.

 

 

thanks,

 

HP.