• From BOL:
    Requires the following permissions:

    • CONTROL permission on the specified object within the database.
    • VIEW DATABASE STATE permission to return information about all objects within the specified database, by using the object wildcard @object_id=NULL.
    • VIEW SERVER STATE permission to return information about all databases, by using the database wildcard @database_id = NULL.

    😎