Hi, 

We're looking at setting up Azure AD Sync and on the guide it states that you need to be an Azure Global Admin. Is that a full requirement? Or is there a lesser role we can grant to the service account we're creating that will manage the sync. 

Guide link: Azure AD User Sync (sdpondemand.com)

Or is it a one time authorisation so no azure account details are reused/stored to sync once it's granted initially? 

Thanks, 

Gary