Following advice from http://www.sane-project.org/README.linux
I solved this apparently more "correctly" by adding the desired users to the "scanner" group, e.g. to let user "goulo" scan,
sudo usermod -a -G scanner goulo
(and then the user needs to login again for it to take effect).