This question has been answered by asanvery. See the first response.
The group's Policy must have the "unpublish_document" permission.