The following roles can be attached to the member used to run Scout in order to grant necessary permissions:
Viewer
Security Reviewer
Stackdriver Account Viewer