I thought that the most powerful permission should be ADMINISTER (at least by documentation). So it is the reason why I want Script console with ADMINISTER permission - because it is powerful tool which grant "God-like" access. I think that we do not need some lesser permission for run scripts (but not create) if there is a RUN_SCRIPTS permission and ADMINISTER is the most powerful.
/** * {@link Permission} that represents the God-like access. Equivalent of Unix root. * * <p> * All permissions are eventually {@linkplain Permission#impliedBy implied by} this permission. * * @deprecated since 2009-01-23. * Access {@link jenkins.model.Jenkins#ADMINISTER} instead. */ public static final Permission HUDSON_ADMINISTER = new Permission( HUDSON_PERMISSIONS,"Administer", hudson.model.Messages. _Hudson_AdministerPermission_Description(),null);