...
To allow another user to access all initial passwords for the VMs in their tenant, assign the "Retrieve VM initial password" privilege. In this API, this privilege is called "VM_RETRIEVE_INITIAL_PASSWORD".
By default this privilege is only assigned to the Cloud Administrator role.
...