Anyone whose role has the Show Employees Logs permission — it's under the Employees permission group, not restricted to SuperAdmins by name, though in practice you'd typically reserve it for owners/managers given it exposes login and permission history for the whole account.