This could responsibility is designed for that kind of users.

Without that it could lead to inconsistencies during the time off
validation flow. (ir.rule errors, ...)