The minimum privilege required on the external stage for any role in the GET REST API to access unstructured data files using a file URL is USAGE. This allows the role to use the stage but not alter the stage or its content, which would require higher privileges such as READ, WRITE, or OWNERSHIP.