The mandatory permissions are
dev-obs:breakpoints:set for set/edit/delete a breakpiont
and
storage.application.snapshots:read;
storage:buckets:read WHERE storage:table-name = "application.snapshots";
for reading the snapshots.
Other permissions for managing breakpoints and opt-in/out of the feature are optional - learn more about it here.
