Role required to edit/update only Worker Email

Summary:

Hi Experts!

We had a requirement to come up with a custom role which would give edit/update privilege to employee's work emails with edit/update restrictions imposed on the rest only viewing privilege should be allowed for the rest. We had created a custom job role and derived a data role from the same giving 'Manage Person Email' privilege to the job role. we have attached only this role to a user account and unfortunately when we did the PATCH it showed '403 Forbidden' message. Does anybody have any info on what additional roles/priv should I provide to achieve the requirement or am