What other capabilities does ASE_ADVANCED_USER_MANAGEMENT enable?

Summary

We have been advised to enable the ASE_ADVANCED_USER_MANAGEMENT user profile option for the sign-in sign-out REST api but would like to ensure that we are not creating a security issue

Content

Support document 2661308.1 describes how to enable and use the REST api for sign-in and sign-out (oam/services/rest/access/api/v1/audit/events)) which is an excellent api and should be extended to at least a month instead of 7 days(Larry if you're listening!). The issue is that we have to add the ASE_ADVANCED_USER_MANAGEMENT capability to Manage Administrator Profile Values as per