what rights does the backup exec service need to run backup jobs.

What rights does the backup exec service account need to run backup jobs. I have a exterprise windows 2003 server installed with BEC. My jobs fail unless I add the backup operator to the domain admin group?? I feel this is a great security risk. What exact rights does this account need.