Create App Profiles or Microsoft 365 Service Account Profiles
To use AvePoint Cense, you need to create app profiles for authentication and data collection.
Create App Profiles
For common functionalities in AvePoint Cense, app profiles are required for data retrieval and authentication. For the functionalities in Cense, you need to create one of the following apps in AvePoint Online Services:
- Cense service app – The service app with all the required permissions for AvePoint Cense. This app can be created in the **Modern** **mode** in AvePoint Online Services > **App management**. When you have multiple app profiles created for Cense, this is the default app profile leveraged by Cense.
- Microsoft 365 and Microsoft Entra ID apps – The apps with the required permissions for AvePoint Cense and other services that support these types of apps. Both the Microsoft 365 and Microsoft Entra ID apps are required for the functionalities in Cense if you are not leveraging the Cense service app or custom Azure app. They can be created in the **Classic mode** in AvePoint Online Services > **App management**.
- Azure app – The app to which you can customize the permissions to grant. You can use the custom Azure app to meet the compliance policies. This app can be created in the **Custom mode** in AvePoint Online Services > **App management**.
Create Service Account Profiles
To include user properties related to mailbox usage in the exported license reports, such as mailbox size and mailbox archive status, you need to in AvePoint Online Services with the SharePoint Administrator and Exchange Administrator roles.
The Exchange Administrator role is required for retrieving mailbox-related user properties in the License report.
The SharePoint Administrator role is required by the scheduled export of license reports to the specified SharePoint library.
Note the following:
- Your service account configuration in AvePoint Online Services can only be retrieved and validated when you have configured an app profile in the same tenant.
- To retrieve users’ MFA status, the service account leveraged needs to have the Global Administrator role.
