Creating custom Integration User with Roles

Summary:

Hi , I am trying to create an integration user "Integrate_User" in Fusion HCM . Our company network administrator needs this user from us so he can call webservices to user Workers API and UserAccounts API . What is the minimum roles I need to add so he can only do Read Only with API calls ?

My update so far

==============

1)

Since I am employee , I used my HR user name on POSTMAN and tried to use /hcmRestApi/resources/11.13.18.05/workers?expand=addresses and /hcmRestApi/resources/11.13.18.05/userAccounts and it works fine .

2)

Now i am trying to create a new custom integration user with minimal roles , I dont want them to be able to select any senstive information other than - Emp Name , Job , Location , Work relationship , supervirsor , email id & contact address