What are the minimum permissions required to assign a User or Group Read permissions on a GPO?

Hello,

For all GPOs in our domain, I want to use a Powershell script to use the Set-GPPermission cmdlet to assign the 'Read' permission to a Security Group.  Are Domain/Enterprise Admins the only 'authorities' which can assign this permission or is there a 'lessor' authority we can use?  I've only got 'Domain/Enterpise' Admins to work.

Thanks for your help! SdeDot