Reporting an Issue or Missing Feature
The documentation of Sync-PnPSharePointUserProfilesFromAzureActiveDirectory suggests that you can use Sites.Selected permissions on SharePoint to create a sync job. I've tried it, but it does not work. The JSON file is written to the site that you configured, but the job-creation fails right after with an Authorization exception. It needs access to the Tenant Admin site.
As soon as you grant Sites.FullControl.All, the problem is solved.
Expected behavior
I'd expect the documentation to be correct 😁
Actual behavior
The documentation is not correct:

Steps to reproduce behavior
Follow the documentation and try it out.
What is the version of the Cmdlet module you are running?
2.2.0
Which operating system/environment are you running PnP PowerShell on?