What are the minimum access rights (in access groups) required for a user to get data over the REST API?

With a user set to start from No Access, I created an access group containing:


Action > REST API > Full
Register > Items > Read

but I was unable to get the items. Do I maybe need to add a module that the Items register appears in? I can get items if I change the user to start from Full Access.