Minimum permissions required for API call for getting subsites and getting role assignments

Hi,

I am working on SharePoint, and I was using two APIs with OAuth2 authentication:

1. https://kendra001.sharepoint.com/sites/swapcomsite_v1/_api/web/Webs

2. https://kendra001.sharepoint.com/sites/Ritika_Site/Child_subSite/_api/Web/Lists(guid%2777b646d2-d1d5-45fa-a976-d6cf31a5a59f%27)/Items(1)?$expand=RoleAssignments/Member,RoleAssignments/RoleDefinitionBindings

Previously there was full control permissions given to my app on Azure AD portal. But now I cannot use those permissions. I have to work with Read Only permissions.

So, I want only the bare minimum permissions required to use these two APIs.