Does system need to be added to AD, in order for sssd to authenticate?

[onetech-it]

Is there a requirement for a CentOS 7 server to be literally added to my Active Directory AD domain (Windows 2012 R2) in order to allow user authentication?

Also,

1. Where in the server's config files can I limit which AD users are allowed to actually ssh into the CentOS server?
2. Where in the server's config files can I limit who is allowed to sudo as root?