Which security rules for access snaphot api?

I'm afraid there isn't a cluster privilege specifically for snapshot.