Hello,
According to the documentation [https://confluence.atlassian.com/doc/configuring-the-whitelist-381255821.html] there is a test a url function which tells us what inbound and outbound urls are working. Since there is no mention about the permissions was wondering who can access this function.