I've been able to configure api calls through REST services to our SSPR server. I can get user status, user challenges and set user password using Postman with Basic Auth.
But I can't get info from another user rather than the one who is making the call. I get the error:

"errorCode": 5027,
"errorMessage": "You do not have permission to perform the requested action."

I can't figure out what kind of permissions the message is asking me to check when I use the 'username' parameter in Postman.

Has anyone experienced with this? Any help will be appreciated.