#Create Service Account Profiles

The table below lists the services that support the service account authentication method.

*Note: The AvePoint Online Services common service option is only supported for service providers to create service account profiles.

Navigate to Management > Service account. On the Service account page, click Create. Then, configure the following settings in the Create service account profile pane.

*Note: If you have configured service account profiles in the classic UI, these service account profiles can still be used to scan objects and invite users in the new UI.

1. Profile name – Enter a name for the service account profile.

2. Description – Enter an optional description.

3. Select tenant – Select a tenant from the drop-down list.

4. Select service – Select at least one service from the drop-down list.

5. Username – Specify an account with the permissions required by your tenant’s cloud services. The permissions of the Microsoft 365 service account vary with the different cloud services your tenant is using. Refer to the Required Permissions of Cloud Services section below for more information.

   Note the following:

   • AvePoint does not recommend that a personal active user account be used as the service account. We recommend you use a separate service account to manage all administration.

   • If you run a scan profile to scan SharePoint sites / Microsoft 365 Groups, the specified service account will be automatically added as one of the Term Store Administrators.

   • The specified Microsoft 365 account cannot have multi-factor authentication (MFA) enabled. If your organization has MFA enabled, you can refer to additional details in the following section: Helpful Notes for Passing the Validation Test of a Service Account.

6. Password – Enter the login password of the account above.

   *Note: The password is validated via Microsoft 365 API. Due to a Microsoft 365 API limitation, you may encounter the following issue: the password is checked as invalid here, but you can use this password to log into Microsoft 365 successfully. To resolve the issue, you must change your password in Microsoft 365, and then enter the new password here. For details about the password limitations and requirements, refer to Password Limitations and Requirements of Microsoft 365 Accounts.

7. Click Save to save your configurations, or click Cancel to go back to the Service account page without saving any configurations.

8. If you encounter the error Your organization has set access policies that block the validation and the service account profile cannot be saved, refer to the solutions in the Helpful Notes for Passing the Validation Test of a Service Account section below for troubleshooting.