Yep, now that I'm playing with the roles I can see what is going on...

Error Response
Http Code: BadRequest Bad Request 
{"type":"<https://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.1>","title":"Bad Request","status":400,"o:errorDetails":[{"detail":"Invalid search query. Detailed unprocessed description follows. Your current role does not have permission to perform this action.","o:errorQueryParam":"q","o:errorCode":"INVALID_PARAMETER"}]}