Permissions

Three permissions, under a Microscope heading in Settings → Users → User Groups.

Permission	Grants
View scans and reports `microscope:view`	The dashboard, the scans list, individual scans, the check catalogue, and both report formats.
Run scans `microscope:scan`	Starting a scan from the control panel. Nested under viewing.
Manage checks and the schedule `microscope:manage`	Enabling and disabling checks, deleting scans, and emailing a report. Nested under viewing.

The last two are nested beneath the first, so granting either implies the ability to view.

Settings are admin-only

The Settings screen is not covered by any of these — it requires an admin account, like other plugin settings in Craft. On a site with allowAdminChanges off in production, settings are read-only there too; use a config file instead.

The navigation adapts

The Microscope sub-navigation only shows what the current user can reach. A user with no Microscope permissions doesn’t see the item at all; one with view-only sees the dashboard, scans and checks but no settings.

Reports are not public

Both report formats are control panel routes behind the view permission. There is no public URL and no token-based sharing link. To give a report to a client or a host who has no account on the site, send them the PDF.

A suggested arrangement

Developers — all three, or admin.
Site owners and project managers — view, and optionally run. Enough to watch the score and hand a report to a host, without being able to switch checks off.
Editors — none. There is nothing on these screens for them.

Next: Twig API