Accounts with an AAD source are accounts that have been created in Azure. I mentioned that, for Azure AD Connect, you should use a service account for syncing. Note that this account must have a global admin role. An example of how to create such an account is shown here:

The default user role (when creating a new AAD user) is User. This option can be changed to Admin during creation or after the user has been created.