What Domain Right is needed to be able to add a domain user to local admin

What specific domain right needs to be granted to me, to allow me to be to be able to add a domain user to the local admin group?

I am not a full domain admin, but I have been given rights to add computers to the domain and administer an OU.

I can add a computer to the domain just fine, but when I try to add a domain user to the local administrators group on that computer, so they can install apps, etc., it won’t let me.

The bottom line is I can’t grant the domain users I set up local admin privleges on their local computers.

Does anyone know what specific right I need to be granted in order to be able to do this?

Any comments would be appreciated.

Thanks.