Permissions for Kibana API and SQL API

In the list of permissions in the documentation ( I do not seem to see anything for the SQL interface, or for the Kibana APIs, e.g. for working with saved objects.

Are there defined permissions for these but not documented, or is full access needed in order to use them?