I'm starting work on a project to add an additional forest to sync to Azure. The users in this forest have accounts in both their forest and the forest syncing to Azure.
I figure since we want to grant access to resources in the existing domain, syncing to Azure, we would need a trust relationship because we can't add an AzureAD account back to a synced group for permissions and assign azure accounts to internal resources.
I just want to make sure I'm not missing anything.
David Jenkins