A role passed by the caller which gives the service permission to update the resources associated with the optimizer on the caller's behalf.