During the CiraSync setup, the service account requires the following:
- Global Admin Permissions
- The Application Impersonation role
If syncing Public Folders, the service account also requires a mailbox license, which, at the minimum, is an Office 365/Online Exchange Kiosk license.