What permissions needed for Asset Scan

What permissions needed for Asset Scan

What level of admin rights needed to do a scan, I know Domain admins works, but this is against our company policies, what is the minimum needed to scan assets in domain??

Likewise for import from AD,

Version 7008 with MSSQL 

                  New to ADSelfService Plus?