Required graylog rights

Hello, just trying to setup this template.

What are the required graylog's user rights to make this work ? I would prefer not to have a full-admin user used for monitoring.

Thanks 