Does Get-PNPTenantSite require a minimum of Sites.Manage.All?

[wcnitz]

Using delegated model with interactive login, no admin consent required. PNP App is configured with Sites.Read.All and consented. User is SharePoint Online administrator, and this is all verified. Connection is successful, but attempting to retrieve site collections using Get-PNPTenantSite fails with "Attempted to perform an unauthorized operation".

I have seen a couple people reference that Read.All is insufficient to retrieve the site collections as it retrieves more than just the metadata. Is this correct? Is Sites.Manage.All sufficient?