You need to meet the technical requirements for User1. The solution must use the principle of least privilege.
What should you do?
Add Users1 to the Server Operators group in contoso.com.
Create a delegation on contoso.com.
Add Users1 to the Account Operators group in contoso.com.
Create a delegation on OU3.
Submit