Minimal privileges required to edit IP address of a model