What rights are need to be able to make rest API calls