Permitir uso de API por usuarios regulares, no solo administradores

I’m thinking for the default case where person A has installed Discourse,
and person B is just a simple user on person A’s Discourse,
and A has not changed any admin settings, could B still do much with the API?