to respond to the above comments - it appears the article is saying you only need one of the roles not all of them - so having application administrator role should be sufficient. At least that is how the article reads for me as we certainly will not be able to grant global admins to any account running an automated installation process