Users with a viewer role have the ability to "look" at the credential by clicking it under "Credentials" in the team, so they could look at how a credential is configured They can only see ******** for any sensitive data.
👉 For more details on teams and roles see here