Privileges Required to use Registry Entries 
To use registry entries, you need either:
scheduler-administrator role
system, partition or isolation goup-level permissions
object-specific prvileges
You need one of the following privilege ranks to be able to create registry entries:
Create - allows you to create registry entries on the level the privilege was granted (system, partition, isolation-group), you have no further privileges through this rank, you automatically get privileges on registry entries you create.
Edit - allows you to create, view, and edit all registry entries on the level the privilege was granted (system, partition, isolation-group)
Delete - allows you to create, view, and delete all registry entries on the level the privilege was granted (system, partition, isolation-group)
All - full control over all registry entries on the level the privilege was granted (system, partition, isolation-group)
To successfully edit a registry entry, you have to have one the following privileges:
Edit - privilege rank on the registry entry, or on registry entries in its partition, isolation group or system-wide
Delete - privilege rank on the registry entry, or on registry entries in its partition, isolation group or system-wide
All - privilege rank on the registry entry, or on registry entries in its partition, isolation group or system-wide
Registry entries can reference the following objects, you need at least View privileges on these objects when you want to edit a registry entry that references them:
Library
'"Credential''
Application
Formats
Locks
Events
Queues
Submit Frame
Time Window
Resource