API Permissions needed to read user details

In a JSON collection for a form the owner is specified as a URL, for example https://kc.kobotoolbox.org/api/v1/users/roaima

Usually this returns

{"detail":"You do not have permission to perform this action."}

On my own deployment of KoBo I would like to be able to look that up, but the only way I can get past the permission issue is to set the retrieving account to be a superuser.

I don’t need or want to change it - and I don’t really want this account to be able to make any changes.

Which individual permission can I assign to retrieve user information?