Hello. Are you using this ID for the orders collection: “Stores/Orders”
You can query the orders collection but there is a data limit which can cause errors as well. You can read more about working with that collection in this article.
The read permissions are admin so you should be able to use the suppressAuth in options in a backend file if you need to manipulate the query but you cannot change the default permissions of this collection.