Jen digs into user permissions around GP utilities. I would generally come down on the side of just using ‘sa’ for something like this. GP Utilities are rarely used, primary for install. GP Utilities fall under the Christmas rule. They are rarely used and they are important to people, so it needs to be done right. Spending a little extra time and energy is usually the right answer. Involving an ‘sa’ user to add a new company or run another utility shouldn’t be a big burden and adds a little safety by involving someone else.
I’m sure there are extreme circumstances where you might want a non-sa user doing things like creating companies (REITs with hundreds of small entities come to mind), but that isn’t the norm