If I remember correctly the service account user will just need to be sysadmin in the local sql instance. The requirements are similar to what is documented in the following KB article, without the need for the account to be domain admin.
SolarWinds Knowledge Base :: What SQL account permissions does Patch Manager require?
