What permission(s) is required to allow users to refresh repositories

Ever since the rancher update that changed the sync interval for repositories for 6 hours, we now have to manually refresh the repositories in order to upgrade our charts if we want to deploy within that 6 hour window.

Most of our users are not admins, and they currently do not have permission to refresh the repositories. We have tried with no luck to set the correct permission to allow users to do this.

Is there any guidance as to what permissions are required to be able to do this?

Also is there any general documentation as to what rancher2 features correspond to which permissions, as it is not simple to infer them from just the names.