Service Accounts and "least rights"

I am looking for documentation on the "least rights" that the

SolarWinds services accounts need. They want all services accounts for

SolarWinds removed for the Domain Admin Group, unless we can show why they

need to be in the group.