you need to ensure that user1 can view the events in the security event log the solution must minimize the number of rights assigned to the user1