What permissions required for Azure AD Service account only for reconciliation use case?

[shilpab]

We have only reconciliation usecase  in our scope for client. 

Client do not want to give all permissions to service account used to connect to Azure AD.

In Azure AD Connector guide , In section , Preparing Azure AD for Integration , its mentioned to give all permissions..

Could you please let me know, only for Azure AD Reconciliation , what minimum permissions are required for service account ?

[avinashchhetri]

@shilpab,

For the specified API permissions for each modules in the documentations, you can try replacing the *.ReadWrite.All permission with *.Read.All and give it a try.