The FPolicy server needs backup privileges at least, to register to the storage system.
The right to scan ACLs is granted to CIFS logins using standard Windows methods. If you are connected to the storage system using an account that is a member of the Backup Operators or Administrators groups you can use the FILE_FLAG_BACKUP_SEMANTICS open mode, which allows you to access any file, regardless of security.