Need permission for registrar

https://api.cloudflare.com/#registrar-domains-get-domain

What permission do I need to grant to the token to be able to?
GET accounts/:account_identifier/registrar/domains/:domain_name

I’ve tried “Account Settings Read ({redacted})” to no avail.