What rights are needed in Office 365 to provision and use the Office 365 securlet?
Global Admin rights in Office 365 are required for activation to create the token. The Global Admin can be demoted to an end user after activation.