Can you please advise the minimum permission that can be used for service account?

Which parts of domain controller is going to touch by ADSelfService plus and what are the minimum permission required to perform task by ADSelfService plus on Domain controller?

Thanks 

Arjun