Many customers intend to automate many actions, so they would benefit from a Service Account or user that could be used in API requests or other integrations.

These Service Accounts or Users could have their own PATs and also independent permissions while being part of the 'confluence-administrators' group. I.e. They could be part of that group but read-only access to all content.