in reference to this
is it actually really needed for a user to belong to group “DC Backup hosts” and “Domain Admins” to be able to pass that user credential to univention-domain-join-cli (for the purpose of joining a desktop to a domain)? Or is it enough for that user to be in “DC Backup Hosts”?