Permissions and consent

We recommend creating a dedicated service account in the Azure portal or your Microsoft Partner Center to use for communication between Cloud User Hub and your Microsoft environment(s).

Please note that this account:

• Must have MFA enabled.

• Needs to be a dedicated service account, so it should not be used as a user account.

• Requires the Global Administrator role during the consent process.

• Requires the Admin Agent role in the Microsoft Partner Center (this role assignment only applies to Microsoft Partners with their own Partner Center).

Contact your system administrator if you do not have permission to create this account.