Currently only Space Developers have visibility on the /v2/apps/:guid/env end point which backs the cf cli command `cf env APPNAME`. Please let me know if you have any objections to allowing Space Managers visibility of an app's environment variables. This is something we would like to tackle soon to address some visibility concerns.