What kind of LDAP account should I to have in order to bind LDAP server if I need to use group policy?

I am trying to setup FreeRadius server to use group policy based on LDAP attributes. Is there any special requirement for the account used to bind LDAP server? Any kind of permission needed? Thank you! Rong -- Rong Wang Senior Network Engineer Address | 500 El Camino Real, Santa Clara, CA 95053 Phone | (408)551-7107 Email | rzwang@scu.edu Website | https://www.scu.edu/is/it