Setting up SPNEGO and kerberos keytab on a clustered head node what AD privileges are needed?

I have a 20+ node clustered system with the Discovery Studio and Pipeline 
[rootdude@puppy1 ~]\$ hostname -f

basenji1.cm.cluster
 
[rootdude@puppy1 ~]\$ hostname --fqdn
puppy1.cm.cluster

Would updating Biovia Pipeline Pilot 2016 SP2 Service Pack make a difference or installing 2017 R2?

 
I just need the details creating the keytab.
 
ktpass.exe -princ basenji1.cm.cluster /server.fqdn@REALM.COM \ 
-mapuser mycompany\AccountName\$ -crypto all \ 
-pass Password123 -ptype KRB5_NT_PRINCIPAL \ 
-out filename.keytab
 
and does it need to be a domain admin account that creates the keytab?
 
I found Lynn Miller and Erica Frank answering many “SPNEGO” and keytab questions on the forum.

-Darin