Plugin needs certain administration privileges to work properly. Most secure option would be to created dedicated user just for the purpose of integrating Google Apps with Crowd.
Minimal set of privileges for dedicated user account:
Page Comparison
Manage space
Manage content
Integrations