No additional permissions are needed. Events2HVAC only performs read-only (GET) requests.
More:
API Parameters