In the instructions, it says to create a lifetime admin account and configure the username/password in service center. 

We are trying to move to OIDC Authentication for IT Users, and this involves clearing passwords of all the "regular" users so they use OIDC exclusively. 

I'm not a fan of creating a local admin account for feature toggle, but it's an Administrator so for now it should work. 

However, I have a few concerns with having a "service account" with Local Admin privileges, and credentials viewable in site props.

Does FTM really need Administrator Role? What are the minimum required permissions for it? 

Can we make this work as a "regular" user on OIDC auth with reduced privileges, not as a local admin?