Our issue is the groups with assigned roles required in the
Installation Guide (Database Availability Groups, Database Copies, and
Databases) for the NMM user account are not enough in our environment,
while Domain Administrator works just fine.  Our testing environment
is a brand new domain set up just for test purposes and we aren't
aware of any explicit denies. Support was great at troubleshooting the
issue as a permissions issue but when we ask for something seemingly
simple like a list of required effective permissions, not so much.
"Just run it as Domain Administrator...."

To sign off this list, send email to listserv AT listserv.temple DOT edu and 
type "signoff networker" in the body of the email. Please write to 
networker-request AT listserv.temple DOT edu if you have any problems with this 
list. You can access the archives at 
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER