Examples

What common bots actually need

Ten bot types, the exact permissions each one uses and why. Not one of them needs Administrator.

Moderation bot

Kicks, bans, timeouts and message cleanup.

9 permissions3 high risk2 medium risk1099511721094

Verdict: Broad

Music bot

Plays audio in voice channels.

7 permissions281474980137984

Verdict: Minimal

Ticket bot

Private support channels or threads per request.

8 permissions2 high risk2251800082238480

Verdict: Broad

Welcome & autorole bot

Greets members and assigns a starter role.

5 permissions1 high risk268487680

Verdict: Reasonable

Reaction & button roles

Members pick their own roles.

6 permissions1 high risk268520512

Verdict: Reasonable

Leveling / XP bot

Tracks activity and rewards roles.

5 permissions1 high risk268487680

Verdict: Reasonable

Logging bot

Records edits, deletes and member changes.

6 permissions1 medium risk4503599627422848

Verdict: Reasonable

Verification bot

Gates new members behind a check.

5 permissions2 high risk268454914

Verdict: Broad

Giveaway bot

Hosts giveaways and picks winners.

5 permissions85056

Verdict: Minimal

Utility / slash-command bot

Commands that reply to the user.

3 permissions19456

Verdict: Minimal

Notice something?

The most demanding bot here, a full moderation bot, is still limited by role hierarchy and channel overwrites. Administrator would remove both limits and add nothing it needs.