Based on this MSDN article, and clarification by @Handyman5, the section "Delegating Authority to Modify SPNs" states

If you need to allow delegated administrators to configure service principal names (SPNs), you must ensure that their user accounts have the Validated write to service principle name permission.

The permission to delegate Validated write to service principle name requires Membership in Domain Admins, or equivalent


So I recently figured out how to do this. Follow the steps in the MSDN article about delegating the permission to Write SPNS.

However, you need to add one more permission for the account other than the Validated Write to Service Principal Names permission that is mentioned in MSDN article and that is write service principal name.

You need to add this permission in the exact same fashion as the how the article instructs you on the Validated Write to Service Principal Names (applies to computer objects, etc).

By adding this permission it allows you to write to the SPN attribute without needing full control, domain admin, or write all properties.

As a side note if you only add the Validated Write to Service Principal Names permission you will get the following error while trying to create a SPN and not access denied.

Failed to assign SPN on account LDAPName error 0x200b/8203 -> The attribute syntax specified to the directory service is invalid.