Unable to create or access the Active Directory container 'CN=VMM,DC=XXXXX,DC=local'. Access is denied. Specify the distinguished name for the container and verify that you have GenericRead|CreateChild|WriteProperty rights on the container.

Question

Hello,

I am trying to upgrade from VMM 2016 to 2019. I am getting this error for svc account which is a domain user while upgrading to VMM 2019.

Unable to create or access the Active Directory container 'CN=VMM,DC=XXXXX,DC=local'. Access is denied.
Specify the distinguished name for the container and verify that you have GenericRead|CreateChild|WriteProperty rights on the container.

I have verified the svc account has full control on DKM container and on all descendant objects.

I want to understand is there any requirement that account used to install/run the setup must be domain admin or must be owner of the DKM container and its descendant objects.

Thank you.
Swati