vCenter Server = read-only privileges (user must be defined at root vCenter Server object and have the propagate checkbox selected)
vCenter Operations Manager = user privileges.
Security Guide is here, but does not contain this information: Log Insight 1.0 Beta Security Guide