Every DMZ permission, at once. Also required (or operator level 2) for /dmzconfig, /dmzrestoreupdate and /dmzdebug.
/dmzconfig
/dmzrestoreupdate
/dmzdebug