What permissions are necessary for Virtual Terminal access?

In preparation for phishing-resistant MFA, we're auditing user permissions. I know there's been a new Click & Pay released this month - in that release, does a user need any of the following permissions in order to use the Virtual Terminal: Customize Application, Author Apex, View All Data, and/or Modify All Data?