Excellent blog article by cferber
Minimum vCenter permissions required for vRealize Operations and vRealize LogInsight