At T419796: API rate limits: define tiers for logged-in (browser) users (specifically T419796#11706361), I mentioned...
(snip)
At the very least, global-rollback, global-sysop, staff, stewards would benefit from even more extended limits.
Turns out, ombuds would benefit from some extended REST limits, as noted at this apihighlimits request by current OC member. While he also needed apihighlimits-requestor for other reason as well, not being subject to CDN rate limit would help high-frequency script running (he specifically mentions 429, which seems to be CDN rate limit).