What permissions do a Service Account need?

What permissions do a Service Account need?

I'm trying to set up PMP and running it with a service account. My question is, can the service account work if its a regular user account, or does it need Domain Admin privileges? I hate running service accounts with Domain Privileges, so I"m just making sure I need it.
TY

                  New to ADSelfService Plus?