Should a user with just "search" capability be able to view results for all users from | rest /services/search/jobs
?
See if this one answers your question:
https://answers.splunk.com/answers/217229/what-capabilities-does-a-rest-api-only-user-need.html