You need to provide the members of RODC_Admins with the ability to manage the hardware and the software on RODC1
You need to ensure that a user named Contoso\User1 can promote DC10 to a RODC in the contoso.com domain