I created an account on O365 for syncing passwords via ADSS+ and gave it the 'Password administrator' role. Can someone confirm that this is correct (or what other roles this account requires if not)?

Many thanks