Permissions required by Azure AD Connect

https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect-account-summary/