AD

Active Directory

For Active Directory sync a service account is required in AD with no additional access.

Active Directory requires the Active Directory PowerShell module which can be installed as part of RSAT and can be done via Add Roles and Features.

It can also be installed via PowerShell using the following command

Install-WindowsFeature -Name "RSAT-AD-PowerShell" -IncludeAllSubFeature

Firewall access it required from the Glue Data Collector to a domain controller on port TCP 9389 (AD web services) in order for the sync to work.