...
The following permissions are required in Azure for synchronization:
Manage Resource Groups:
Enable write access for the following:
Microsoft.Resources/subscriptions/resourceGroups/write
Microsoft.Resources/subscriptions/resourceGroups/delete
Information about Creating a resource group is available at Create Resource Groups.
RestAPI information about creating resource groups is available at Resource Groups - Create or Update.
Minimum required permissions to create App Registration is available at Cloud Application Administrator.
Prerequisites for App Registration is available at Prerequisites.