ServiceNow discovery and service mapping

Thanks for taking the time to share your experience and the suggestions.  A bit more information on our setup and some testing. We are using remote authentication with AD, the ServiceNow is using a service account and we have tried various roles with the Service Mappings. As soon as we gave it admin permissions the service mappings started working all the other roles resulted in the failures. This seems like overkill and we do not want to give that much access so are going looking into how we can restrict access if possible.