When running a discover scan, the scan starts from the 'root' level URL that the user has entered as the target. At this level, 'browse directories' permission is needed.
This allows the user to retrieve a listing of all folders and items present in the site. The least privileged permission level with the 'browse directories' permission is the 'contribute' permission level.