Least privileges for the service account used in ADManager Plus

Note: It is recommended to use a member of the domain admin group as the service account under the Domain Settings.

However, if you would like to give granular permissions for the service account, please follow this document.