docs: authentik fine-grained permissions

docs/widgets/services/authentik.md

@@ -12,10 +12,8 @@ Make sure to set Intent to "API Token".
 
 The account you made the API token for also needs the following **Assigned global permissions** in Authentik:
 
-- authentik Core
+- authentik Core -> Can view User (Model: User)
-  - User
+- authentik Events -> Can view Event (Model: Event)
-- authentik Events
-  - Event
 
 Allowed fields: `["users", "loginsLast24H", "failedLoginsLast24H"]`.