Minimal rights for a user to join computers to domain

Hello there,

can someone tell me to which group a user must belong to, to join computers to the domain?

I need the minimal rights to do this.
This users did not do anything else than join computers.

Maybe this helps?