These are my findings about new object types xAPI/cmi5 and LTI consumer ...
Everything analoguous to other object typs with one additional permission:
View learning experiences of other users: read_outcomes
Everything analoguous to other object typs with one additional permission:
View learning experiences of other users: read_outcomes