API Call "GET /api/orgs/{oid}/profiles" (List Profiles) not available for "Viewers"

The Browsertrix API appears to require the same role for GET /api/orgs/{oid}/profiles as for modifying crawls, even when only reading. A read-only “viewer” account therefore gets HTTP 403 with the message “User does not have permission to modify crawls”.

Is that by design?

For documentation purposes, it would be helpful to have a read-only “viewer” account that can execute all GET requests.

This also applies to GET /api/orgs/{oid}/profiles/{id}.