Sync Drift/Counter

We have a FortiAuthenticator implemented in out environment and we want to use a local user to Drift/Counter Sync the fortitokens when it's needed.

Problems:

1. The minimum permissions to that user is through an "admin profile", read & write "Users and Devices". He can then access directly the link https://IP/admin/fortitoken/fortitokendrift/ but he can also access the Authentication\User Management. We don't want that.
2. Through "$env:SystemRoot\System32\curl.exe" and powershell script we just have GET and DELETE. The idea was to GET the list of fortitokens and POST with the 2 codes but POST doesn't exist.
3. Also through SSL using "exec fortitoken sync FTKXXXXXXXXXX 111111 222222": No such command...

Any other idea to Sync these fortitokens using a script? Or block the user to that specific URL? Or remove the left menu for that user?

Thanks