You install a read-only domain controller （RODC） named RODC1. You need to ensure that a user  named User1 can administer RODC1. The solution must minimize the number of permissions  assigned to User1.     Which tool should you use（）