Which role allows listing credentials per user

[3.23 and below]

The following role allows the user to list credentials per user.