The comment in redis.conf(redis7.0.15) says that the default user does not have permission to execute the psync command, but it does.
# However this is not enough if you are using Redis ACLs (for Redis version # 6 or greater), and the default user is not capable of running the PSYNC # command and/or other commands needed for replication. In this case it's # better to configure a special user to use with replication, and specify the # masteruser configuration as such:
# masteruser \<username>
#
# When masteruser is specified, the replica will authenticate against its
# master using the new AUTH form: AUTH