What are the minimum rights that an AD service account needs to work in VCAC?

I have a read only AD account that can only READ from AD and not write , is this going to be an issue , so does the account need read and write access to AD?

thanks!!!!Image may be NSFW.
Clik here to view.