I don't have the list handy, but Configuration Manager grants the rights needed (folders/files/user rights) for the service account.