Replace or modify SAGUser


I have installed tamino on a Windows Server.
For a security issue, I would like to know if the SAGUser must be in the Administrator Group?
Is it possible to give less access to the SAGUser? If so, what is the minimum required and where?

Best regards