adding note on privileges required by main user

(Trying to find minimal combination that permits me to create a new
campaign... not yet successful.)