Active Directory user group resolution failed - DLP 14

Dear,

I have some workstation with the following warrning, Active Directory user group resolution failed
according to this KB https://support.symantec.com/en_US/article.TECH186...

Active Directory permissions conflict with Symantec Data Loss Prevention permissions. Also, Active Directory may be missing attributes.

Verify that the credentials that are passed to the agent have necessary permissions to extract logged-in user information from Active Directory.

You cant tell me whats permissions are necessary for the instalation of the agent?
The user I am using for the installation is the workstation administrator