necro_mancer

based on your requirement, you have to always give the write permission to generate the intended sitemap.xml.

I agree with necro_mancer. You can use the location element to provide the permissions specifically