Capabilities/tool/certificate:viewallcertificates
From MoodleDocs

- Allows to view all certificates (but not change) in the Workplace Certificates feature
- This capability may be applied in any context and will work on the certificates defined in the same context (system or course category), however user will not be able to view certificates issued to users from other tenants
- The default Tenant administrator role has this capability set to allow