Autocomplete won't work for entity reference field unless User > Administer Users permission is granted
The endpoint that provides AJAX entity reference completion (system.entity_autocomplete in system.routing.yml) is configured with with requirements._access: 'TRUE' property. This should make the /entity_reference_autocomplete/%/%/% path accessible to any user. 

As such, check for any module that might be modifying its permissions.