Requires at least Sys.Audit permission for /nodes path and VM.Audit permission for /vms. Both need to be propagated.
Sys.Audit
/nodes
VM.Audit
/vms