The list of capabilities doesn't explicitly list this.
I want a particular power user to be able to use the rest API and see a result of all users, not simply themselves. They have the ability to execute REST already, but they only ever see their own user account when running this command:
| rest /services/authentication/users splunk_server=local | table realname
Capability: edit_user