s3-samr-idl: add SAM server specific access rights.