What are the minimal privileges that the Bind DN need to have in Active Directory for UTM to be able to query Active Directory?

Hi, 

I've looked everywhere but haven't found any clear answer for my question. The only thing I've found is that it is best practice not to make the domain Administrator account the Bind DN as it is a security risk or any account that belongs to the Domain Admins group in AD for that matter . So does that mean that I can put any user account as the Bind DN? Is any user account able to query Active Directory?

Any help is greatly appreciated!