3.1.1.5.5.4 Security Considerations
No permissions are required for replicated updates.
For originating updates, the requester must have the following permissions.
To delete a regular object, at least one of the following permissions must be granted to the requester:
RIGHT_DELETE on the object being deleted, or
RIGHT_DS_DELETE_CHILD on the parent of the object being deleted, when the object is not an NC root.
For originating updates of transformations of deleted-objects to recycled-objects, all the same security requirements as those listed for a normal deletion must be met. In addition, the requester must have the permission RIGHT_DS_REANIMATE_TOMBSTONES on the NC root of the NC where the operation is being performed.