BE 2010 R3 Services account permission

Hello,

We are trying to install BE on DC but DC are not backuped by BE (don't need permission for VSS which is equal to domain admin)

and here is my question, which permission required for service account?

domain admin will fail with security audit...

Thanks for anwser

rywek