Permissions requried to connect to asterisk CLI

what permissions does a user need in order to connect to the CLI?

i am guessing i would need to configure asterisk before compiling it to run as a different user becides root and then give users the proper permissions for that user/group. can any one verify this?