The key permission that sets up Auditor is called Auditor Permissions

One name for it in the console, in the API's refusal and in the docs.