Service Account Permission

Service Account Permission

I was reading through the documentation and it is a little vague on the permissions required and eludes to needing Domain Admin.  Would it be instead possible to delegate password reset for the account in question to lock down?  Is there a security best practice for this?

                New to ADSelfService Plus?