What rights are required in SQL Server to create and view an Extended Events session?
In SQL Server 2008 and 2008R2, a user had to be granted CONTROL SERVER to create and run sessions. CONTROL SERVER is roughly equivalent to sysadmin. The difference is that if you grant someone CONTROL SERVER and you don’t want them to access something, you can issue an explicit DENY. Having to do that for a large number of objects would be a pain, though.
by Concurrency Blog