For Eaton IPM to shut down ESXi, what ESXi role permissions are required?

I'm tasked with configuring IPM 1.65 to shut down the virtual machines hosted by a standalone VMware ESXi v6.7 host, then to shut down the host itself. To be clear, this host is the free version, not the ESXi managed by a centralized vSphere server.

(Edit: This is the standalone ESXi, not the VMCA-managed, more fully featured instance.)

These are my steps so far:

1. Create a user in ESXi namedpowerquality.
2. Create a role in ESXi namedpower quality.
3. Assign the role power quality to the userpowerquality.

What privileges does the rolepower quality require so this user, via an Eaton IPM infrastructure connector, can shut down the VMs and the host?

I've given the user the following permissions:

Root.VirtualMachine.Interact.PowerOn
Root.VirtualMachine.Interact.PowerOff

I wish to allow the minimum set of permissions while still enabling full...