To connect to your Active Directory Domain Service, %BRAND_AAD_CONNECT_SHORT% needs the credentials of an account with sufficient ...

To connect to your Active Directory Domain Service, %BRAND_AAD_CONNECT_SHORT% needs the credentials of an account with sufficient permissions. You can enter the domain part in either NetBIOS or FQDN format, that is, FABRIKAM\syncuser or fabrikam.com\syncuser. This account can be a regular user account because it only needs the default read permissions. However, depending on your scenario, you may need more permissions. For more information, see %BRAND_AAD_CONNECT_SHORT% Accounts and permissions.