ASR user requirements

We are deploying ODAs for a user who has some security concerns about their Oracle SI admin user being the one used by ASR.

I can't see any specific document that covers the minumum requirements for the ASR user.

Could anyone off answers to the below.

1. My Oracle Support account minimum privilege requirements for Auto Service Request
   1. Role, i.e. user or administrator.
   2. Service Request, i.e. none, read only or create and update.
   3. Patches, i.e. download or view only.
   4. Assest, i.e. no access, view or admin.
2. What should the contact distribution list be for each asset?
3. Which MOS account should be the assigned contact for each asset, who will then become the owner of each asset?