Default GITHUB_TOKEN doesn't permit REST API getAuthenticated()?

Calling octokit.rest.users.getAuthenticated() in an action results in a “Resource not accessible by integration” error. Is this because the default token doesn’t include the “user” scope?