You need to be:
webadmin
webadmin.settings
webadmin.settings.view
Details on ACE permissions can be found here: