Active Directory application aware backup permissions

[cividan]

Hi, I'm trying to do application aware backup from active directory domain controller so that we can restore deleted account. What AD permission does the veeam account need to have to be able to perform application aware of active directory server? Is it possible to install the required agent or software separately from outside the backup job and then have veeam use that agent or software to do the application aware backup. We don't want to give the veeam account "domain admin" roles for obvious security reason.
Thanks !

[foggy]

You have to use the Domain Admin account for application-aware processing of the domain controller.