SPS_Initiated-Service account capabilities

Hi, 

In our break the glass procedures, we define the use case in which, if all three of our SPP are down, we wish to start the session using SPS initiated.

To do so, we must connect SPS to the domain and require a service account with write permissions.

Our client Is asking what are the minimum criteria for this service account.

Thank you.