How to create a Non Administrative User Account to run universal forwarders to forward Windows security logs?

Hi All, I need to install a Universal forwarder in our environment, but due to strict policies, we cannot give the user it runs with administrative rights. Could you please give me a list of minimum access that can be granted to the user to run Universal Forwarders? We only need to forward security logs from the devices. Also, what are the features that will be disabled in Low Privileged mode? I have installed 6.3.2. Regards, Akshat