MidTier process account should have 'Full Read' permission on all associated SPWebApplications. For more information about ...