Here's a description of the current expectation: https://www.keycloak.org/docs/latest/upgrading/index.html#the-serverinfo-endpoint-only-returns-the-system-info-for-administrators-in-the-administrator-realm

My reading of that and https://github.com/keycloak/keycloak/pull/42859/changes#diff-a670c50697a8bc5b3b7da8df073359040beb3749067920e9d27cba124bf404f9R122-R123 is that if the if the service account had "view-realm" in the master realm, that should be sufficient as it's in the admin realm roles:

Using any other realm requires view-system.

cc @rmartinc

Thank you for the response. I am unsure of how to add the "view-realm" role to my service account in the master realm. The UI does not list my service-account as a client in the master realm.

In my non-master realm, if I try to add realm-management client's view-system role to my service account, I receive a 403 error.

There were some changes to the serverinfo in the last versions. The version was first restricted and then only available with manage-realm permission. It is not available now with view-realm. The only way to revert this is using the view-system (you need to create this role) and enable the FGAP in the realm (but probably this will be even deleted in the future).