What rights does the Backup Exec service account need?

Details:

All Backup Exec ™ services on the media server run in the context of a user account configured for Backup Exec system services. This account can be created during the Backup Exec installation, or an existing user account can be used. To create a service account for Backup Exec during installation, supply a user name and password when prompted.
If this computer is in a domain, enter a Domain Administrators account, or an equivalent account that is part of the Domain Admins group. In the Domain list, select or enter the Domain name.
If this computer is in a workgroup, enter an Administrators account, or an equivalent account that is part of the Administrators group on the computer. In the Domain list, select or enter the computer name.
The account designated for Backup Exec services – whether it is a new account or an existing user account – will be assigned the following rights:

• Authenticate as any user and gain access to resources under any user identity OR "Act as a part of Operating System"
• Create a token object, which can then be used to access any local resources
• Log on as a service
• Administrative rights (provides complete and unrestricted rights to the computer)
• Backup operator rights (by default includes Logon Locally, Back up Files and Directories, Restore Files and Directories, etc. Refer to Microsoft Documentation for a listing of all rights that the Backup Operator Group has by default.)
• Manage auditing and security log

· ·
Note: Due to security implementations in Microsoft Small Business Server, the service account must be Administrator.

Originally taken from: here