What permissions are needed for /scim/v2/Users/ API call?

You need to keep the permission. We've verified this issue and are working on a fix to track these API calls for graduation.

To graduate your app, please create a support ticket so we can get your app details to graduate.

For verification, when I call "GET /scim/v2/Users" without ReadAccounts permissions, I get a "403 Forbidden - CMN-401 Insufficient Permissions" error so you need the permission.