Monitoring of Domain Controllers

Monitoring of Domain Controllers

Hello there
We are looking into monitoring our D/C's from OpManager but will not allow a service account to be a domain admin.

I have found
https://pitstop.manageengine.com/portal/kb/articles/how-to-configure-a-non-admin-user-for-wmi-monitoring
but Domain Controllers do not have security groups to add a user to .

Can you please advise what permissions are required for a service account to actually monitor multiple DC's?

I would like to see replication traffic if possible.