How can I create a new user/group for API access and give that user full read access to every space in the project? I've tried giving the group full global permissions, but I still have trouble with spaces via the API. It seems like the global permissions are overridden by the fact that the group doesn't have specific permissions on each space.