Just in case you ever need to give a non-superuser access to the Unified Service Manager in UMP the ACL associated with the user/contact will need the following permission checked:
Basic Management: Restart, move, download, drop actions, etc.: Management: admin
I found this by trial&error i.e. adding permissions one or two at a time until it allowed me access.
Does anyone know if this is documented anywhere? i.e. what permissions are required for each portlet?