Please check Glenn Berry's blog post -- Provisioning a New SQL Server Instance – Part One -- https://www.red-gate.com/simple-talk/sql/database-administration/provisioning-a-new-sql-server-instance-part-one/ -- "You should request that a dedicated domain user account be created for use by the SQL Server service. This should just be a regular, domain account with no special rights on the domain. You do not need or want this account to be a local admin on the machine where SQL Server will be installed. The SQL Server setup program will grant the necessary rights on the machine to that account during installation."
Current documentation is at https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/configure-windows-service-accounts-and-permissions?view=sql-server-ver15#Serv_Perm
The permissions list isn't just "logon as a service", and is a bit more complex than just assigning a few permissions through secpol.msc, so it's best to do it using the Configuration Manager tool.
17 People are following this question.