What ACL permission controls access to the ability to perform the "Security->Validate" function in Infrastructure Manager?
The ACL that controls this is called "Extended Security".
Without this permission, the "Security" menu still appears in Infrastructure Manager, but the functions are grayed out.