Entitlement required: readSelfProfile (Read your user profile) or manageSelfProfile (Manage your user profile).
Note: You only need one entitlement, but you can have more than one.

On Success, the returned response includes the user and group membership details. The group membership that is returned includes the group ID and displayName attributes.

This API requires an authenticated user's access token that is generated from an application client during sign-on. This API does not support the use of an API client-generated access token.
Send a valid user access token in the authorization header, by using the bearer authentication scheme.