On some other configurations I've also seen the sys_admin capability to be needed. I think this capability is needed when using the "force user/group" options.
On some other configurations I've also seen the sys_admin capability to be needed. I think this capability is needed when using the "force user/group" options.