AggregateSubmissions reports a metric per group over a time range and is what charts use instead of listing every submission. Up to two grouping dimensions are allowed, and time buckets with no submissions come back as zeroes rather than being skipped. Reading analytics needs its own permission, which is broader than being able to see the submissions themselves.