Context:
In the past it happened that the Optimize user actually required more authorizations than documented. To prevent such thing in future we discussed and decided to limit the authorizations of the Optimize user in our ITs as well as in stage deployments to the minimum. See https://confluence.camunda.com/display/CO/2020-11-25+The+Back-End+Senate+-+November

AT:

• user used to access the engine rest api has limited authorisations

Hint:
See https://docs.camunda.org/optimize/latest/technical-guide/setup/configuration/#connection-to-camunda-bpm-platform on the minimum authorizations