HC ADSync tool

Hello, 
 
Your tech guy has installed ADSync tool for me. Can you please answer the following questions so that I can starting using it.
 
1. Which kind of permissions we would require for tenant admin to sync the users form on-premises to cloud?
2. Do I need to do some changes in the Window firewall of Cloud AD?