#Get Started

To start using AvePoint EnPower and ensure optimal functionality, follow the steps below:

1. To grant users access to EnPower, you need to add them to AvePoint Online Services as EnPower users. For detailed steps on user management in AvePoint Online Services, refer to .

   *Note: Users must be added to AvePoint Online Services with Microsoft 365 User/Group selected as the sign-in method.

2. Configure app profile and service account with required permissions in AvePoint Online Services. The apps and service accounts enables EnPower to retrieve objects’ data from your tenant and sync your updates back to your organization. For steps on creating app profiles and service accounts, refer to Create App Profile and Create Microsoft 365 Service Account Profile. For the permissions required, refer to Permissions for Service Account and Permissions for App Authorization.

3. To manage your on-premises Active Directory users, groups, and hybrid mailboxes, install Hybrid Agent and complete configurations in Hybrid Agent Management in your local domain controller device. For details refer to Manage Agents.

4. Create auto discovery scan profiles to scan your Active Directory, Microsoft 365, and Power Platform objects into containers. Objects that meet the configured conditions can be scanned into corresponding containers. Data in EnPower can be checked by containers and you can also specify containers which EnPower users have permission to manage. Refer to Create Scan Profiles.

5. Specify the app profile and service account to leverage for each service type management. This can be completed on the Quick start page where you can also check if all object types already have auto discovery scan profiles configured. For more details, refer to Quick Start Setups.

6. To monitor user activities and object changes, apart from the app profile configurations, ensure the following:

   • in Microsoft 365 Purview compliance portal for each tenant.

   • Enable the data collection for Activities in Microsoft 365 and create app profile for your tenants in .

   This will affect all activity related report columns and dashboard charts.

7. Create EnPower roles and permission groups to assign data scope, accessible pages, and available actions to EnPower users. By assigning users to groups and granting permissions to those groups, you can efficiently control user permissions in EnPower. This approach simplifies access management, enhances security, and ensures that users have the necessary permissions for their tasks. For details, refer to Permissions.

After all configurations above are completed and your objects are scanned into EnPower, you can start accessing reports and performing management operations.