User with rights for ldapmodify or ldapadd

I have to change the domainSID, which user will be able to do this?

I have to add some ldap Entrys for our domain. Which user ?
Or which ACL I have to change?

Sorry for the Question, now it works , the config of the ldif file wouldn’t be right.