account "system username"

Please, what type of account must be created in the active directory for access (directory reading) and the necessary privileges.

thank you

Ordinary domain user. No special privileges needed.

https://docs.graylog.org/en/3.1/pages/users_and_roles/external_auth.html#ldap-active-directory