Access to the REST endpoints is covered by the capabilities for a role. By default, an admin user role has the capabilities to access all of the public REST API.
By default, a user role has access based on the capabilities for that role. This includes access to searches, listing inputs, or getting information from the services/properties endpoint.
If you want a non-admin user to have additional access, you need to create a role for the user and then add the specific capabilities you want the user to have access to.
... View more