In accordance with the IP reveal access policy, assign the following rights to the following groups:
- checkuser-temporary-account-no-preference and checkuser-temporary-account-log to Ombuds globally
- checkuser-temporary-account to Global sysops, Global rollbackers, Abuse filter maintainers and Abuse filter helpers globally