So I have a Client whose IT does not want to administer adding/setting new users up in Laserfiche. However they also do not want the user that does this to have any sort of elevated windows rights.

Now the user has full rights for everything in Laserfiche, but when she is in the admin client she doesn’t see the column that shows the full windows account name, nor does she have the “Directory Named User” rights on each individual’s machine. She is also missing "server settings", "all sessions" and "named user and devices" (even when logged into the server directly). 

I also asked about using windows groups to manage these users but the Windows admin doesn't want to take this approach and wants to completely hands off. 

So what windows rights at minimum does he need to the windows login the designated laserfiche admin uses?