The MDBadmin needs the following Grants:
Select, Insert, Update, Create, Delete
Release: 17.1 and 17.2
You will need a user with DBMS Administrator(mdbadmin) privileges for installation/updating.
This is documented in pre-installation considerations:
CA Service Management Default User Information
The DBA can simply disable the account after installation/update is complete. This is not the account that will be used by the application.