User Activity

HiI want to allow external systems to query the incident, sc_req_item, and sys_user tables via the REST API.What permissions should I grant to the API users?I’d like to limit the roles to the absolute minimum.Thanks!
Is it possible to import an Excel file attached to a catalog item using an import set?My understanding is that if I pass the attached Excel file to the import set within the flow, I should be able to run the conversion map and other processes.
Helpfuls given to