At a minimum, users need rights to Import and rights to add and edit the type of records being imported.