Rest API Permissions

I do not see a way to assign roles for service execution.  Does the service's authenticated user have to be in the administrator role to be able to create users, roles, etc... or is there a way to assign a role such that the only thing that role can do is execute the API calls?

Anyone?