What should be the level of access to scan virtual machines (VM)?

What should be the access level to fetch users and assets from Active Directory?

Unfortunately, scanning assets with root and admin access is incorrect in terms of security

This operation should be done with minimal access.

What do you think are the standard access limits for scanning the above?