How to grant permission for reading Resource groups in WebAPI calls.

Hello, I have been trying to retrieve resourcegroups using webapi calls but unfortunately I get an error with Status code Forbidden. While I understand that this is due to permission granted to the App, I am not sure which area I should grant read permission for. I donot see resource group as an option under business Entities in the Settings>Security>AppRole>Business Entities area to grant even read permission.