is there any documentation anyway(i cant find it),,,the acls needed for
the account used to run the health driver?

by default it is setup and configured with the account you use to create
the driver--i want to run it under a separate account for security.

i have tried the most obvious dirxml* attributes for the driver i am
monitoring---yet i continue to get 672 no access errors.