With this change, we use MODIFY_ACCOUNT instead of ACCESS_DATABASE to allow users to get/delete someone else's external IDs. The rational is that this is the more narrow, better fitting permission. We also document this possibility. Change-Id: I90b5547326590ea9d3e5bcf5afcc9c803066598d