Endpoint Administration Guide for Windows › Scope of Administration Authority › Group Authorization › Group Authorization Attributes › GROUP-OPERATOR Attribute
A user with the GROUP‑OPERATOR attribute can list the properties of any record within the group scope.