Configure the User Profile Synchronization service to import user profile data from Active Directory. and

  • Grant the User Profile service account the least permissions necessary to read data

so below which permission i will add to user profile service account for User Profile Synchronization connection

  1. Grant the account Read permission on the domain.

  2. Grant the account the Replicate Directory Changes permission on the domain.

  • I'm voting to close this question as off-topic because exam questions are off topic here – Robert Lindgren Aug 24 '16 at 20:15

The account which you use to connect to AD( entering while establishing the connection with AD), It must have Replicate Directory Changes permission on the domain with which you’ll synchronize.

The Replicate Directory Changes permission allows an account to query for the changes in the directory. This permission does not allow an account to make any changes in the directory.

Grant Active Directory Domain Services permissions for profile synchronization in SharePoint Server 2013

Not the answer you're looking for? Browse other questions tagged or ask your own question.