Permissions for the Configuration API were removed in #3909 because it was required that we have a system for migrating them (#3910).

Once #3910 is in completed, the permissions should be re-added to the Configuration API endpoint.