#AgentPulse App Profiles

For data retrieval purposes, app profiles must be configured for your tenants. AvePoint Online Services provides two service apps with required API permissions, including:

• AgentPulse app – This is the app created during the onboarding process. The app retrieves activities, interaction, users, and subscriptions of Copilot Studio agents and SharePoint agents.

• AgentPulse Microsoft Foundry app – This app is not automatically added to your tenant during the onboarding process. It retrieves activities, interaction, users, and subscriptions of Microsoft Foundry agents. If you would like to check the related agents’ details in AgentPulse, manually create and connect the app in Management > App management. For details on creating an app profile, refer to Manage App Profiles for Microsoft Tenants.

When you create the app profiles in AvePoint Online Services, select the app to consent and use based on your requirements. Configured apps will be automatically set up in your Microsoft Entra ID.

For details on the API permissions required by each service app, refer to the following sections.

#AgentPulse Service App Permissions

The table below lists the permissions that should be accepted when you authorize the AgentPulse app.

API	Permission	Type	Purpose
Microsoft Graph	AiEnterpriseInteraction.Read.All (Read all AI enterprise interactions)	Application	Retrieve Microsoft 365 Copilot interaction data.
Microsoft Graph	Application.Read.All (Read all applications)	Application	Get the list of applications in this organization.
Microsoft Graph	Group.Read.All (Read all groups)	Application	Inventory the groups for reporting purposes; Add Microsoft 365 Groups into AvePoint Online Services, and support signing into AvePoint Online Services with Microsoft 365 accounts.
Microsoft Graph	InformationProtectionPolicy.Read.All (Read all published labels and label policies for an organization)	Application	Retrieve tenant sensitive labels that will be displayed in the Copilot report.
Microsoft Graph	Organization.Read.All (Read organization information)	Application	Get the list of commercial subscriptions that an organization has acquired and calculate user seats; Retrieve your Microsoft 365 tenant information (geo location, region, domain).
Microsoft Graph	Reports.Read.All (Read all usage reports)	Application	Read usage report data of all reporting.
Microsoft Graph	Sites.Read.All (Read items in all site collections )	Application	Search across files related to SharePoint Agents.
Microsoft Graph	User.Read (Sign in and read user profile)	Delegated	Support signing into AvePoint Online Services with Microsoft 365 accounts.
Microsoft Graph	User.Read.All (Read all users' full profiles)	Application	Retrieve your Microsoft 365 tenant user information.
Commercial environment: Dynamics CRM GCC or GCC High environment: Dataverse	user_impersonation (Access Common Data Service as organization users)	Delegated	Retrieve and list Copilot Studio agents.
Office 365 Management APIs	ActivityFeed.Read (Read activity data for your organization)	Application	An aggregation of actions and events for specified content types such as Microsoft Entra, SharePoint, OneDrive, Teams, or Viva Engage.
SharePoint Office 365 SharePoint Online	Sites.Read.All (Read items in all site collections)	Application	Read items in all site collections for the Copilot report.
Commercial environment: PowerApps Service GCC environment: PowerApps Service – GCC GCC High environment: PowerApps Service – GCC L4	User (Access the Power Apps Service API)	Delegated	Retrieve the information of the environments.

After creating the app profile for AgentPulse and granting permissions, you can return to the Get Started section for further setup.

#AgentPulse Microsoft Foundry Service App Permissions

The table below lists the permissions that should be accepted when you authorize the AgentPulse Microsoft Foundry app.

API	Permission	Type	Purpose
Microsoft Graph	User.Read (Sign in and read user profile)	Delegated	Signing into AvePoint Online Services with Microsoft 365 accounts.
Azure Machine Learning Services	user_impersonation (Access Azure Machine Learning Services as organization users)	Delegated	Retrieve and list Microsoft Foundry agents that were previously created.
Axure Service Management	user_impersonation (Access Azure Resource Manager as organization users)	Delegated	Gets all subscriptions of a tenant.

After creating the app profile for AgentPulse and granting permissions, you can return to the Get Started section for further setup.