Endpoint server services

Hello,

I installed the Endpoint server and the 2 local services are for the moment running with the local account "protect".

How can I change this account with an Active Directory domain account ?

What are the permissions required for this account to do its DLP job correctly ?

Thanks in advance for your help.

Regards