I have set up an instance of SSPR and have synchronised with an AD source.
The user I am using to create the Sync has been granted the appropriate permission (as per documentation) but cannot reset passwords due to a insufficient right error.
It does work however if granted Domain Admins. Please could you clarify what further right may be required outside of those stated in the set up docs.
AD source is Server 2019
Thanks
Jon