what are specific rights i need to configured the azure ad connect to make changes in sync configuration

Question

Hello,

AD Connect is configured and synced properly. I need to make some changes only excluding some OU to sync using OU-based filtering. What are the rights I need to run this tool to configure this again?

as by defaults it sync all the object during installation ,but I need to change in default OUs and sync only specific OU like here, which I need to exclude below.

This link mention for first installation for AD Sync connect tool.
https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/how-to-connect-install-prerequisites#accounts

Do I need the same rights to my account to make these changes that only GA.

Thanks
Rich

Answer 1

@Richa Kumari Thank you for reaching out to us, As I understand you are trying to make changes to Microsoft Entra connect sync configuration (need to change OU).

Once you launch the Microsoft Entra Connect - Select Customize Synchronization options, you need to have either Global Administrator or Hybrid Identity Administrator privileges to change the OU configuration.

Same information has been mentioned on the wizard as well

Let me know if you have any further questions, feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.