iControl and user rights

I believe it needs to be a Administrator level user.

I have written apps for "guest" level and "manager". Create your app to log into the level that is appropriate for the group that is going to use it.

Actually, at least 10.1, Operator can download the configuration information via iControl.