cutups
It's a quite "wide question" 😉
Users or business analysts are obviously using the SwaggerHub page as a documentation source and can easily get endpoints requirements (Authorizations, method type etc.).
Since the endpoint is a reflection of the server request specifications, all kind of access prerequisites are supposed to be known by the user.
Additionally, you can restrict the Client actions on properties with readOnly property for example.
Anyway, maybe you can provide more specific use case that we can discuss about
