The user that generated the API key must have a role of ADMIN in the DB in order to update users other than himself. cc @Agusti who has more context on that

Unfortunately, we are already using an ADMIN Api key