Here is the set of permissions the Vault bot needs to work successfully.

Pretty straight forward again, and also NO ADMINISTRATION PERMISSION

I assume the only ones that are a little concerning is the manage roles and manage channels permissions. Rightfully so and I’ll explain them next on why they are needed.