#Scan Your Organizations or Environments

AvePoint Cloud Backup for Dynamics 365 supports scanning and protecting your Dynamics 365 CRM organizations or Power Platform environments via either app profile authentication or service account authentication. You can go to the Settings > Scan page to configure how you would like to scan and initialize the organizations/environments the first time you access this product.

On the Scan Settings page, you can select the service account that you have configured in AOS, or you can configure an app profile connection for the scan.

For the organizations that used to be scanned and protected by service account authentication, you can also configure the app profile connection and choose to move the existing organizations registered with the service account for the app profile connection. For details, refer to Add an App Profile Connection.

*Note the following forthe scan using service account authentication:

• Only service accounts that have the Global Administrator role or Dynamics 365 Service Administrator role can be displayed in the Scan settings page grouped in tenants. The service account must have a Dynamics 365 CRM license. Note that the service account with MFA-enabled is not supported.

• The first auto-initiated scan uses random service accounts. You can select different service accounts for rescans.

#Add an App Profile Connection

Follow the steps below to add a connection to Dynamics 365 via app profile:

1. Navigate to Settings > Scan on the Cloud Backup for Dynamics 365 interface.

2. Click Scan settings.

3. On the Scan settings panel, select the App profile option, and click the add new organization/environment link. The Add new organization/environment panel appears.

4. If you haven't created the app profile in AvePoint Online Services for the organizations/environments you want to protect, click the create app profile link in step 1 to go to the App management page in the AvePoint Online Services interface. For details on creating and authorizing the app profile, refer to Manage App Profile.

   From December 2024 release, you can either use the Modern mode service app or use a Custom mode Azure app for the authentication of Cloud Backup for Dynamics 365. If you choose to use the Modern mode service app, the AvePoint Cloud Backup for Dynamics Customer Engagement application will be automatically created and registered in Microsoft Entra ID after the app profile has been created in AOS. If you choose to use the Custom mode Azure app, you must prepare a custom Azure app in your Entra tenant and then provide the app information for consenting while creating the Custom mode Azure app in AOS.

   • For details on creating a custom Azure app, refer to Create Custom Apps > Consent to a Custom Azure App.

   • For the required permissions of the custom Azure app, refer to Required Permissions Consented to the Custom App Profile.

5. Go to Power Platform admin center and then create an application user who has the System Administrator role. For details, refer to Create an application user.

   NOTE

   You can use the App ID displayed on the Scan settings panel to search for that AvePoint app in Microsoft Entra ID.

6. To connect the organizations/environments, you can choose the following ways:

   • Enter the URL of the organization/environment.

   • Move the existing organizations/environments registered with a service account for app profile connection – The organizations registered with service accounts will be displayed in the table, and you can select the service accounts that you want to move to app profile authentication.

7. Click Add to save this connection and go back to the Scan settings panel.

8. Click Scan to scan or refresh the organizations.

#Required Permissions Consented to the Custom App Profile

The Custom Azure app you added to the Entra tenant for using Cloud Backup for Dynamics 365 must have the following permissions:

API	Permission	Type	Purpose
Microsoft Graph	User.ReadSign in and read user profile	Delegated	Sign into AvePoint Online Services with Microsoft 365 accounts.
Dynamics CRM	user_impersonationAccess Common Data Service as organization users	Delegated	Scan, back up, and restore the data in the protected scope.