this user need an administrator role.
here is the predefined administrator roles provided out of the box from Qlik (you can create your own/customer role)
the only role available that gives access to both (security rule and custom property) is the SECURITY ADMIN role.
here is the way that you can give your user SECURITY ADMIN role via the QMC:
Go directly to the step 3 on the setup workflow