Permissions for 3rd party analytics

We’re developing an analytics Plug-in. What permissions do we need from a client who’s using Discourse Hosting?

(we want to extract message content, sender, category, etc. rather thorough extraction of data to create network graphs, engagement buckets from users, sentiment analysis, etc etc.)

Is it possible for them to grant us only access to read/write but not to say create/delete categories? How would that work?