Permissions required for accessing ListGiftBatches endpoint

In our platform, we allow users to generate api tokens so that they can make requests to BB RENXT api. In one of our flows, we check if a gift batch has been approved. For one of our users we have been receiving 403 forbidden error

({"type"=>"urn:blackbaud:forbidden", "title"=>"The requested action is forbidden.", "status"=>403, "detail"=>"The user does not have permission to perform this operation.", "trace_id"=>"447e67b60d5f4a7a8d05a004f6227e36", "span_id"=>"e06ddc5a07ce99d2"})

whenever we make a request to the ListGiftBatches endpoint on their behalf. Im wondering what permissions they would need to add in order to make these requests?