Question about AD Manager - Admin rights in the domain

Question about AD Manager - Admin rights in the domain

What permissions must to be the user configured in the domain?.
 
We want not this user is in the Admin group.