Minimal rights for a user to join computers to domain

[Jobless]

Hello there,

can someone tell me to which group a user must belong to, to join computers to the domain?

I need the minimal rights to do this.
This users did not do anything else than join computers.

[friedrich]

Maybe this helps?

Q&A: Can I Create a Specific Join-User?

Question Can I create a specific “join user” to be able to join client into the domain? Additional Question Can this be done without the “join user” being a domain administrator? Answer According to our documentation any user being a member in the two groups “Domain Administrators” and “DC Backup Hosts” is able to join a computer to the domain. You might add the missing group via UMC (webfrontend) or in terminal via udm like root@ucs:~# udm users/user modify --dn "<USER-DN>" \ --append "gr…