Configuring the proper permissions for Azure AD Connect service accounts