Administrators and the account owner only.

When only one date is sent the range is checked against the stored value for the other. A range violation is always reported under end_date, even when start_date is the field that moved.

Personal access token only. The API supports a second, partner-issued token class that is not part of the public surface. This endpoint does not accept that class.