What permissions does user need to validate credentials in Active Directory?

I have some code that uses the PrincipalContext object with a specific username and password passed into its constructor to bind to Active Directory.

Then a call is made .ValidateCredentials() passing in a different username and password for the user being validated.

My question is, what permission is necessary in Active Directory in order for the first user to bind in Active Directory?