Summary: ui-receiving.third-party-services, described as "Permissions required to call services" suspiciously includes orders.titles.all when all other sub-permissions provide read-only, i.e. .get, permission.
.all permissions are broken up according to the breakdown of order permissions
"Orders: view orders and order lines" includes order.titles.get
"Orders: view, edit orders and order lines" includes orders.titles.get and orders.titles.put
"Orders: view orders and order lines" includes orders.titles.get, orders.titles.put, orders.titles.post