Allow Helpdesk Users to Access Domain Controller via Windows Admin Center

Hi,

I am trying to let Helpdesk staff (Create User Accounts and Reset Password etc.) by using Windows Admin Center. What is the minimum permissions a user requires to be able to successfully authenticate to a Domain Controller using Windows Admin Center in order to allow them to user the Active Directory Extension?

Thanks in advance.