Configure the User Profile Synchronization service to import user profile data from Active Directory. and

  • Grant the User Profile service account the least permissions necessary to read data

so below which permission i will add to user profile service account for User Profile Synchronization connection

  1. Grant the account Read permission on the domain.

  2. Grant the account the Replicate Directory Changes permission on the domain.

closed as off-topic by Robert Lindgren Aug 24 '16 at 20:15

  • This question does not appear to be about SharePoint within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

  • I'm voting to close this question as off-topic because exam questions are off topic here – Robert Lindgren Aug 24 '16 at 20:15

The account which you use to connect to AD( entering while establishing the connection with AD), It must have Replicate Directory Changes permission on the domain with which you’ll synchronize.

The Replicate Directory Changes permission allows an account to query for the changes in the directory. This permission does not allow an account to make any changes in the directory.

Grant Active Directory Domain Services permissions for profile synchronization in SharePoint Server 2013

Not the answer you're looking for? Browse other questions tagged or ask your own question.