You need to be:

  1. Logged in
  2. On an account with the webadmin permission. (or webadmin.settings, webadmin.settings.view)

Details on ACE permissions can be found here: