Role that can launch the Rest API

Summary:

Which role can launch transactions upload into ARCS and launch and download ARCS report via Rest API?

Content (please ensure you mask any confidential information):

Hello All,

I have configured two Rest APIs respectively to upload a file into ARCS and to launch and download reports from the environment.

Now the two users who can launch the Rest APIs are configured as Service Administrator, but the problem is that this role has too many privileges in ARCS and the two users should instead only be able to launch the APIs. Are there other roles that can be configured to call APIs without being Service Administrator?