I have prepared the non-administrator user for collecting data using WMI.
I can query any namespace using this user except root/MSCluster. For root/MSCluster it returns 'access denied'. At the same time, I can successfully query it using domain administrator account.
Get-WSManInstance wmi/root/mscluster/* -Enumerate -Filter "SELECT * FROM MSCluster_Resource" -ComputerName host1.corp.com -Authentication Kerberos -Credential firstname.lastname@example.org
'email@example.com' is added to 'Performance Monitor Users', 'Distributed COM Users' and 'WinRMRemoteWMIUsers__' groups, 'Event Log Read Permission' is granted, full access is granted for all WMI namespaces, full DCOM access is granted