account delegation

Netscaler native OTP Active Directory account delegation

How to minimise the right given to the Active Directory service account used by the LDAP policies on Netscaler for OTP configuration ? When setting up Citrix native OTP in Netscaler