A user with manager or full admin can see email addresses of all users.  However, if that same user has a token/access to the core_user_get_users call and the user you are searching has their email display set to "hide my email address", the email will not return in the call.  Since the token/user is privileged, it should return the email address