SEP12.1 RU5 NT SERVICE\SQLANYs_sem5 account permissions?

We have just upgraded recently from SEP 11 to 12.1.5.  I've noticed that the Symantec Embedded Database Service uses the account NT SERVICE\SQLANYs_sem5. 

The issue we are having is that are Wintel team, has a very strict AD policy in place which doesnt allow this account to automatically start the Embedded Database service, so everytime the server is rebooted we have to manually go in and start the service.

I've requested to have a seperate Symantec domain account be created in order to run this service, however i have been asked the level of permissions it requires, could someone be able to clarify this please?

Thanks,

John