ACME client | Proxmox permissions

[cfl]

May anyone know what permissions the user rolling out the SSL certificate through the API needs on Proxmox?
Unfortunately I am not talented enough to look at the source code myself and understand what API calls its using.