Which group-privileges are needed for Web Proxy access when using auth.?

[MrCCL]

Using OPNsense 18.7.7

I've enable user authentication in Web Proxy (local db) and assign my test-user to a group with privileges to:
Proxy: Login
Services: Proxy

But that doesn't seem to be enough.

I can only get it to work if I assign all the privileges :-(
Which ones do you need for Web proxy access?

Another question:
-How can I "clear"  the authentication timeout (TTL)...the minimum is 1 hour?
Trie to restart the proxy service, but it didn't "clear" it.

-In the Proxy authentication form there is something called "Authentication processes" (The total number of authenticator processes to spawn.).....can someone explain this parameter?