What differentiates lawful intercept from regular port mirroring asides from the destination of the mirrored traffic?

Is it just the permissions involved with LI (ie: not normally viewable in a standard config view, admin users only)?