[3.8.6] Update api user rights