Privileges and Permissions for Active Directory Accounts
To join a computer to a domain, use credentials for an Active Directory account that has privileges to join computers to the domain and the full name of the domain that you want to join.
For instructions on how to delegate rights to join a computer to a domain, please see Microsoft article 932455 .
The level of privileges that you need is set by Microsoft Active Directory and is typically the same as performing the corresponding action on a Windows computer.
For more information about Active Directory privileges, permissions, and security groups, see the following references on the Microsoft TechNet website: