He would need root equivelent on the ESX(i) hosts. Local administrator on the vCenter server.
However my experience with auditors is that they ask for the information they want, and you provide it for them. I have never had an auditor ask for direct access to my Infrastructure, however I have had them watch over my shoulder while I pulled the needed information.
Good Luck
