I need to be in a role where I can join VMs to the domain and nothing else. Is there such a role or something similar? It seems like the management wants to minimize the privileges as much as possible. There are just too many roles in the list, I am not sure which one is the most suitable for me.