I already assigned the role as you recommended above. The user gets the role, however, I still have this error. The current user has no permission for the characteristic: [read] for Users.
Can it be that the user has to login again? Because after a new login, the BO works normally.