Cloud Sync prerequisites
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit b09763e · +1 −1 lines · also on GitHub
⋯ 21 unchanged lines
2222
2323
- Domain Administrator or Enterprise Administrator credentials to create the Microsoft Entra Connect cloud sync gMSA (group managed service account) to run the agent service.
2424
- A Hybrid Identity Administrator account for your Microsoft Entra tenant that isn't a guest user.
25
−- An on-premises server for the provisioning agent with Windows Server 2016 or later. This server should be a tier 0 server based on the [Active Directory administrative tier model](/security/privileged-access-workstations/privileged-access-access-model). Installing the agent on a domain controller is supported. For more information, see [Harden your Microsoft Entra provisioning agent server](#harden-your-microsoft-entra-provisioning-agent-server)
25
+- An on-premises server for the provisioning agent that runs Windows Server 2022, Windows Server 2019, or Windows Server 2016. This server should be a tier 0 server based on the [Active Directory administrative tier model](/security/privileged-access-workstations/privileged-access-access-model). Installing the agent on a domain controller is supported. For more information, see [Harden your Microsoft Entra provisioning agent server](#harden-your-microsoft-entra-provisioning-agent-server)
2626
2727
- Required for AD Schema attribute - msDS-ExternalDirectoryObjectId
2828
⋯ 183 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 01:59 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.