What rights are required for the Altiris Agent to function

My predacessor had set up the Altiris agent account as a service account and added it to the domain admin group. Is this agent required to be in this elevated of a group for patch management of is there a better group or rights to associate with this agent?

Thanks

Cris