What roles does an auditor need in CORE?

Auditors require the ANY security role. No other security or workflow roles are necessary.