Issue Summary:

JSM apps that are invoked by portal-only (custom account) users will only be able to make asApp API requests to resources that support anonymous access.

This means users have fewer permissions than they otherwise should.

Portal-only users should have the correct permissions applied when a Forge app makes API requests on their behalf.

Steps to Reproduce

Follow https://developer.atlassian.com/cloud/jira/service-desk/rest/api-group-request/#api-rest-servicedeskapi-request-get

Expected Results

asUser() call returns values if the user is a customer

Actual Results

asUser() call returns a permission error if the user is a customer without an atlassian account

Workaround

Use .asApp() for the calls where that works too.