AD manager : Permissions of user in domain?

AD manager : Permissions of user in domain?

 
What type of permissions must to be the user account in the configured domain?
 
We want not this user is in the Admin group.

                  New to ADSelfService Plus?