Replace or modify SAGUser

Hello,

I have installed tamino 4.4.1.4 on a Windows Server.
For a security issue, I would like to know if the SAGUser must be in the Administrator Group?
Is it possible to give less access to the SAGUser? If so, what is the minimum required and where?

Best regards