Really all it is used for is searching for other accounts to add to Orion's accounts. You really only need to be able to read the accounts in order to do this as far as I know.
It does not -- your account only needs rights to read the object you are accessing; I'm going to guess this is there as a blanket statement so Solarwinds doesn't have to document and deal with someone doing odd things with access rights.
[My regular AD login is also the manger of the groups I'm adding to Orion, so it works -- I didn't need to use an admin-powers-enabled account to get it to work]
Thank you guys for the reply.
This make things far easier.