Minimum access level on VCenter API

Hello Forum,
we have one customer, who wants to grant minimum access level on VCenter.
And after that to configure the VM Manager with this credentials.
I have checked our VCenter and found a lot of possibilities to grant reader access.
But what are the minimums?
Please see screenshot (sorry, only in German)
Many thanks for your comments.

Does noboby have a hint for me?