You are working with a customer who needs to create a new Safe Design.

CyberArk’s Safe permission definitions state:

List accounts allows the user to view the Accounts/Files list (so they can see the account to connect to).

Use Accounts explicitly enables the user to log on through PSM by clicking the “Connect” / “Connect with account” button from the Accounts List or Account Details.

Therefore, the minimum Safe rights to allow “Connect only” are List accounts (C) + Use Accounts (A).