Reference Guide
...
Password Vault User Rights
Auditor User
the auditor user can see all accounts and groups defined in password vault, but cannot take any action on these accounts in addition, the auditor user sees users with permission to access that account on the account and group tabs auditor user groups must have the following function groups function group description sapm management the main password vault function group sapm account module visibility function group that grants the authority to see the vault account tab sapm group module visibility function group that grants the authority to see the vault group tab sapm auditor function group to which the auditor authorization is granted