Based on answer from @sorin, but made visual:
Basically, the permission can be granted to users by an admin user.
Win + R
secpol.msc
Have fun :)