Merge Contacts task (from search results) is checking for 'administer CiviCRM' permission. Should check for 'merge duplicate contacts' permission.

Permission checking for the Merge Contacts task is incorrect. In prior versions 'administer CiviCRM' permission was required for merges. However in current versions there is an explicit 'merge duplicate contacts' permissions which is what should be checked.