#Manage Agents

To view and manage your on-premises Active Directory resources in EnPower, you need to install and configure AvePoint Hybrid Agent Management on your Azure Directory servers with Exchange Management Shell. For details on downloading AvePoint Hybrid Agent Management, refer to .

*Note: For the management of hybrid Active Directory resources, you must download and install AvePoint Hybrid Agent Management on the device that has Microsoft Entra ID Connect.

To complete the installation and configuration, refer to the following sections for instructions.

#Register an AvePoint API App

To connect your on-premises resources to Hybrid Agent Management, you need to .

For details on app registration, refer to .

Refer to the following table for the permissions required by the app.

Service	Permission	Why we need this
AvePoint Online Services	autodiscovery.readwrite.all	Allows Auto Discovery Scan profiles to retrieve information.
AvePoint Online Services	hybrid.readwrite.all	Allows AvePoint Online Services to retrieve on-premises resources’ information.
EnPower	entrust.graph.readwrite.all	Allows the management of on-premises resources in EnPower.
Hybrid Service	hybridserver.common.readwrite.all	Allows the AvePoint Online Services to synchronize information from/to Hybrid Agent Management.
Hybrid Service	hybridserver.agent.readwrite.all	Allows AvePoint Online Services to retrieve data from Hybrid Agent Management.

#Install Hybrid Agent Management

To install Hybrid Agent Management, complete the following steps:

1. Find the ZIP file downloaded from AvePoint Online Services on your local device and extract the file.

2. Run the Setup file as administrator.

3. In the Hybrid Agent Management installation wizard, select the destination folder to install Select a destination folder to install Hybrid Agent Management to and click Next.

4. The installation scan will start to check whether all installation requirements are met. If any of them is not met, after installing or upgrading the required tools or system, click Rescan to check again.

   After all requirements are met, click Install to proceed.

5. When the installation finishes. Click Configure now to complete the agent configuration to connect it to your tenant and AvePoint Online Services. Or you can click Finish to exit and complete the configurations later.

To repair, update, or uninstall Hybrid Agent Management, run the setup file as administrator again, and select Repair, Update, or Uninstall.

#Configure Hybrid Agent Management

To connect the Hybrid Agent Management to your AvePoint Online Service and EnPower, complete the following steps:

1. In the local device that has Hybrid Agent Management installed, find the Hybrid Agent Configuration the Start menu or in the folder you installed Hybrid Agent Management to.

2. Run Hybrid Agent Configuration.

3. In Connect to AvePoint Online Services step, complete the following settings:

   • Data center – Select your AvePoint Online Services data center. To check your data center, go to AvePoint Online Services, and click your profile photo on the upper-right corner. Click Organization profile and your data center is displayed.

   • Microsoft 365 tenant ID – Enter your Microsoft 365 tenant ID.

   • AvePoint Online Services application (client) ID – Enter the client ID you’re your registered app.

   • Certificate thumbprint – Enter the certificate thumbprint you used for the app registration.

     *Note: The certificate must be installed on the device that has Hybrid Agent Management installed.

   • User proxy server connection – To use a proxy server for the connection, select the checkbox and provide the proxy server information, including host, port, username, and password.

   Click Next to proceed.

4. In the Domain settings step, enter the domain and provide the account information of a domain admin for authentication. Then, click Next.

5. In Upgrade setting, if you want to automatically upgrade your agent, select the checkbox.

6. Click Submit to save your configurations.