Ah but I think I misunderstood this. It doesn't give access to more fields in an API endpoint, it just decides whether or not the endpoint can be called at all. Please disregard my previous comment.