Global Administrator / Azure Roles

Good morning, 

Hopefully someone can help us with this. Once netIQ DRA has been installed in our environment, could someone guide us on what permissions, if any, the service account used to install NetIQ would need in the azure environment? I'm assuming it would need the User Administrator role and Exchange Recipient Management, but hoping we can confirm that. 

Thank you! 

Terry