LDAP Read only Administrator account

[gokuking]

Hi all. First time posting. Sorry if this is posted on wrong section, wasn't sure where to put it.
Have installed snipe it and would like to connect it to Active Directory and have been reading following documentation.
https://snipe-it.readme.io/docs/ldap-sync-login
We never, ever write anything to your LDAP server, and a **read-only administrator** account can be used for these settings.
What exactly is read only admin?
I have been reading following documentation and haven't been able to figure out exactly what it is.
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/appendix-b--privileged-accounts-and-groups-in-active-directory
Kind regards