What permissions of Microsoft Active Directory should LDAP's system username have?

[kevinbolton]

Hi,

I want use Microsoft Active Directory to perform user authentication in Graylog.
I will create an account for “System username”

What permissions should it have?

[shoothub]

Normal AD user account should be enough.