Minimal rights for a user to join computers to domain

[friedrich]

Maybe this helps?

Q&A: Can I Create a Specific Join-User?

Question Can I create a specific “join user” to be able to join client into the domain? Additional Question Can this be done without the “join user” being a domain administrator? Answer According to our documentation any user being a member in the two groups “Domain Administrators” and “DC Backup Hosts” is able to join a computer to the domain. You might add the missing group via UMC (webfrontend) or in terminal via udm like root@ucs:~# udm users/user modify --dn "<USER-DN>" \ --append …