Azure ATP account user help

I need  help to identify which type of user should I create for the Azure ATP Tenant. According to the documentation: https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-prerequisites#before-you-start the user must be standard .. But how will objects be read AD- and Domain controller permissions to read users, but i think if i put a basic user the user cannot read the log files and just access the domain but not list the objects.

Thanks for helping