Remote REST calls for a user getting 401 - can you turn on BA support for non admin?

Running V12.1 can you get a newly created account remote access to make iControlREST calls using Basic Authentication? I have tried to create a new user and group and resourcegroup etc to give a user access to one data group. On F5 it works great but not remotely, I get 401, I have seen conflicting stories saying yes and no. Can BA be enabled for REST calls coming remotely?

Thanks