The IT department I'm working with does not want to create a user in Active Directory with admin privileges for Confluence integration. Is it possible to create user with less privileges if Confluence only needs read privileges from AD? If not, why do I need an admin user in AD? (I need some explanation for the IT department)