UpdateSection Operation Denied

I am updating the storage and deployment leases via UpdateSection like shown here:How to renew the lease of a VApp in VCloud director 5.1 Java API?

For some users this works but for others they get an Operation Denied error on UpdateSection.

Via vCloud Directory though, they can Reset Leases.

Is there a permission they need to do it through the sdk?

Thanks