For the API https://api.koha-community.org/#tag/biblios/operation/updateBiblioItem a user must have the permission edit_catalogue {"permissions":{"editcatalogue":"edit_catalogue"}} it should be {"permissions":{"editcatalogue":"edit_items"}}