Which organizational role should you assign to the user…

You have an Azure subscription.
You create an Azure Active Directory (Azure AD) tenant named Tenant1.
You plan to integrate Tenant1 and the on-premises Active Directory.
You need to create a user account that can be used to synchronize changes from the on-premises Active
Directory. The solution must use the principle of least privilege.
Which organizational role should you assign to the user account?

A.
Service administrator

B.
Global administrator

C.
Password administrator

D.
User administrator