...
As in previous versions, the VM owner can always access the initial password for their own VMs by clicking the key button on the VM control panel.
...
To allow another user to access all initial passwords for the VMs in their tenant, assign the "Retrieve VM initial password" privilege. In this API, this privilege is called "VM_RETRIEVE_INITIAL_PASSWORD".
By default this privilege is only assigned to the Cloud Administrator role.
...