Create a partner service account

Cloud User Hub uses a service account with the least privileged access in all customer tenants to connect to the Microsoft Partner Center.

Create a dedicated Cloud User Hub service account

1. Sign in to the Azure Active Directory Admin Center

2. Choose Users

3. Click New user > Create new user

4. Populate the required User name and Name fields.

   We recommend using a username that easily identifies this user as the Cloud User Hub service account.

5. Click on the n groups selected link next to "Groups"

6. Select AdminAgents from the "Groups" list, then click Select

7. Click on the User link next to "Roles"

8. Select Global Admin from the "Directory Roles" list for the initial service account setup

9. Set a Usage location

10. Click Create to add the service account

Verify your Cloud User Hub service account settings

1. Sign in to the Azure Active Directory Admin Center with the newly created Cloud User Hub service account

2. Update your password when prompted

3. Ensure MFA is configured

4. Once MFA is configured, it directs you to the Microsoft Partner Center portal

5. Select Users

6. Choose your Cloud User Hub service account

7. Click Groups

8. Ensure the user is a member of AdminAgents

9. Click Assigned roles

10. Ensure the user is assigned the Global administrator role

Now that you have configured your service account, you can begin the Cloud User Hub onboarding process.