Hello there,
An other option is to go for the SNMP agents, this way you only need SNMP read rights. Write csn be handy for clearing logs but not needed as you can clear logs from logviewers on the server itself. Now config the trap to your SIM server and you will receive events.
If you want to use WBEM try the following:
You can also give the account remote dcom rights, read rights in all of the WMI tree exept for the wbem subscription part you would need wmi right rights.
