Security

I am trying to set up lab. I have CPPM up. I managed to bring DC/ADDS but when i try and join the CPPM i use a normal domain account (which i created in AD) but it fails. 

I tried multiple ways, only way it works if i use default AD Admin account or an account with Domain Admin rights.

Can explain what should be minimum rights to the account as i do not want to leave ad admin.

You should be able to add/modify computers in AD:

https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Common-ClearPass-domain-join-errors/ta-p/192591

Thank you so answer is domain admin  

Right.  But once you add CPPM to the domain, the account is no longer needed.