Accessing the app does not require any special permissions (any permission level can login).
You need to have the role Billing Reader or higher to see your subscriptions and resource groups costs.
Cost saving recommendations require that you have the Reader role on the subscriptions or resource groups.