[Freeipa-users] System Account for Client Enrollment

Hello, I want to create an IPA "system" account that will be able to enroll clients (nothing else). There a discussion (around 2016) but it looks that is not relevant with the FreeIPA 4.5. Also, I cannot find anything in the Red Hat's KB. So, what is the correct way to create a system account that will join hosts in the IdM domain?