Privileges Required to use Credentials 
To use credentials, you need either:
scheduler-administrator role
system, partition or isolation goup-level permissions
object-specific privileges
You need the following privilege ranks to be able to use credentials in job definitions:
View - allows you to view the credential and use it in a job definition.
You need the following privilege ranks to be able to create credentials:
Create - allows you to create credential on the level the privilege was granted (system, partition, isolation-group), you have no further privileges through this rank, you automatically get privileges on audit rules you create.
Edit - allows you to create, view and edit all credentials on the level the privilege was granted (system, partition, isolation-group, object)
All - full control over all credentials on the level the privilege was granted (system, partition, isolation-group, object)
Edit - allows you to create, view and edit all credentials on the level the privilege was granted (system, partition, isolation-group, object)
All - full control over all credentials on the level the privilege was granted (system, partition, isolation-group, object)
Credentials can reference the following objects, you need at least View privileges on these objects when you want to edit a credential that references them:
Application
Credential Protocol
Delete - allows you to view and delete all credentials on the level the privilege was granted (system, partition, isolation-group, object)
All - full control over all credentials on the level the privilege was granted (system, partition, isolation-group, object)