Is root required for cta- commands?

Do we need to run anything as root? Can we run cta-admin commands under non-root users?

cta-admin commands can (and should) run as standard users.
All the operator needs is a kerberos token or configured SSS key.

Best regards,
Julien Leduc