Hi @luca-steinke, this is indeed something that we should and will document. Here are the minimum required permissions:
View permissions on:
extras > custom-fields
ipam > prefixes
All permissions on:
ipam > ip-addresses
virtualization > cluster-types
virtualization > clusters
virtualization > interfaces
virtualization > virtual-machines