What are the minimum security role requirements to access CRM

Hi, I'm following the guidance from MSDN for CRM 2016 but the minimum security role described appears to be incomplete/outdated, all the blog posts I can find mirror this documentation:

https://technet.microsoft.com/en-us/library/dn531130.aspx

I get the error

"Principal User is missing prvReadRole privilege"

I only want to provide access to Accounts and Workflow usage in a proof of concept I'm building, so I've granted the following permissions:

• Core
  • Account
    • Create – user
    • Read – user
    • Write – user
    • Append/To - organistional
  • User Entity UI Settings

• • Connection Role - using Access Teams
    • Read
    • Append/To
  • Relationship Role
    • Read
    • Append/To

• • • Create - user
    • Read - user
    • Write - user
• Business Management
  • User Settings
    • Read - user
  • Misc
    • Read Licence Info - don't really know what this does, but seems important
    • Perform in sync rollups on goals - for the next step in my POC so please ignore
• Customization
  • Customizations
    • Read
  • System Form
    • Read
  • View
    • Read
  • Web Resource
    • Read

Execute Workflow Job