It's a little unrealistic to expect an integration account be provided admin privileges like "Global Administrator", "Privileged Role Administrator" and "Cloud Application Administrator".

Are these required only for the setup or are they required permanently.