So there are a couple of different ways to do this, but I recommend creating a new user for SCOM discovery, monitoring and configuration. This user will initially have to be an admin, in order to work with the required certificates and potentially update the Big3d agent. Once initial discovery is completed, you can lower the privileges to something like Manager. This will allow that user to make small configuration changes and enable/disable Pool Members and such.
More information on this topic can be found on our Wiki site here:
F5 Device User Role Security: Device Discovery and Management
There is even more documentation on our general Wiki page which can be located here:
F5 Management Pack Wiki Home
Feel free to ask us for more information if you need it.
Thanks,
-Dave
Nimbostratus