Active Scanning using account Operator rights

[andrema2]

Hi all,

The company I work for has a global AD. I only have account operators rights in the D and more specifically at my OU. Is it enough to use active scanning of my own OU ?

Thanks

[Hemoco]

The account need to have access to perform read-only LDAP queries to the domaincontrollers of the domain.