For Installing, Upgrading, and action that requires creating a new database like enabling Auditing or creating a new Vault Store EV needs DB Creators.
From the Install and Config guide:
"The Vault Service account must have a SQL login account, with Database Creators permission, for the SQL Server"
When the application creates the databases it will make the VSA the DBO of the databases.