Create user for API access with delegated auth only

[rmontagud]

I'm working in an app which requires to read user's address books from their zimbra server. The thing is I want to create an administrative user with limited permissions, just the necessary to exec the DelegatedAuthRequest. Which is the best approach to accomplish this?