Adding computer to the domain requires only single, delegated permission:
- Create computer object
An Access Template with this permission is included with Active Roles out-of-the-box and can be found here:
Configuration/Access Templates/Active Directory/Advanced/Computer Objects - Create