Using the share embed gives you html code so that method would require html permission.
I'd just like to state that I agree with Ruben's notations in this thread against allowing anyone (even co-admin's in my experience) raw HTML posting; it's what BBCode is for, BBCode is a parsed format that doesn't allow "creative code" to be embedded on your site.