https://www.petervanderwoude.nl/post/weird-but-true-permissions-required-to-use-edit-primary-users-devices-in-configmgr-2012/