Currently, it is required that a Global Administrator account is specified during Azure and O365 template creation:
A user account with the Global Administrator role is required for auditing configuration. The account must be sourced from Azure Active Directory. Accounts from other sources are not supported
The user account specified for the Configuration Account must be assigned the Global Administrator role. The account must also be licensed for Exchange Online (other Office 365 licenses are not required).
It would be beneficial if an administrator could specify a lower privilege account if Global Administrator is not required after initial configuration.