Some companies enforce the validation of some end-user details (like location, contact phone number, etc) each time they call the Service Desk.
The Service Desk Agents should be able to update those details from Live Support. Currently it's only possible to do this if the Service Desk Agents have a role which includes the "Access to application administration modules" option. This is totally unacceptable, of course since it grants access to some sensitive administration options.
Under the role management, enabling Create/View/Update doesn't allow users with that role to update a Person record detail.