s3-samr-idl: add User Object specific access rights.