APM admin user rights

Good day,

I am attempting my first APM install and would like to find out exactly what admin rights are required for the admin user that needs to be configured. (This is for the AD queries)

Configuration Utility states: Admin Name Type an administrator name that has Active Directory administrative permissions. The administrator name is case-sensitive.

However is this domain admin rights or does the account require more specialized (elevated) rights?

The install is performed at a customer and they require that we provide the correct rights for this user.

Under:

Access->Authentication->New Server