Your company has an on$-$premises Active Directory forest that contains two domains.

You purchase a Microsoft $365$ E$5$ subscription.

You create a user named Admin$1$ in an Active Directory domain.

You need to ensure that Admin$1$ can implement Microsoft Entra Connect. The solution must follow the principle of least privilege.

To which group should you add Admin$1?$