Merge "Allow BAL permission for UserManagerService" into main