I think (and I am hunting around the back of my mind here) there are two accounts, the discovery agent and the monitoring. Not sure about the discovery account but for the actual monitoring there is a specific database role to use.
Actually, this should clear it up:
https://technet.microsoft.com/en-gb/library/hh457003.aspx
'Only he who wanders finds new paths'