QaaWS rights

I am attempting to use either QaaWS or BI Web Services to enable Xcelsius to refresh enterprise content, but I receive a QWS 2718 error (not authorized) when I attempt to create a connection or query to the web service. I know these rights need to be enabled through CMC but neither our BOE admin nor myself can figure out how to enable these rights. Any suggestions?