Rights to read file rights?

Hi,

which file right does a object need to read file rights of all files?

I need to assign these rights to a role so that the member of that role can
read all file system rights (NSS).

BUT(!) the member shouldn't be able to change the rights.

Any hints are gladly seen.

TiA

Bernd