You need to provide the members of RODC_Admins withthe ability to manage the hardware and the software on RODC1
You need to ensure that a user named Contoso/User1 can promote DC10 to a RODC in the contoso.com domain