You administer a Forefront Identity Management (FIM) 2010 server in your company network. You configure an Active Directory Management Agent (AD MA). The AD MA exports identity data to Active…

The Active Directory Management Agent (AD MA) uses a service account to connect to and write data into Active Directory during an export operation. If this account does not possess the appropriate permissions (e.g., create, modify, delete objects/attributes) on the target organizational units or objects within Active Directory, the export will fail with a permissions error.

The term 'FIM MA service account' is ambiguous, and the critical account for AD export operations is the specific service account configured for the Active Directory Management Agent itself.

The FIM Service account primarily runs the FIM Portal and Service, not the synchronization operations to Active Directory, and 'Replicating Directory Changes' is a permission typically for reading (importing) directory changes, not writing (exporting) data.

'Replicating Directory Changes' permission is required for the Active Directory Management Agent to *import* changes from Active Directory, not for *exporting* (writing) data to Active Directory.