Minimum Roles/Permissions To Retrieve User's Groups

[jonathanmeier5]

I need to retrieve a user's groups.

This issue recommended using govc sso.user.id <username>, which works great.

However, it requires the requesting user have the Administrator role.

Is it possible to retrieve this information without the Administrator role? I'm trying to find the minimum required permissions to make this call.