The docs don't mention this, but there's a very old TID (from 2003) that says the NetStorage Proxy user needs "admin equivalence".

Is this still true?

We're trying to tighten down security and restrict Admin "equivalence" accounts as much as possible.