---
title: "Connection agent for import resources and users"
canonical: "https://docs.cuesystem.com/space/TAM/243040257/Connection%20agent%20for%20import%20resources%20and%20users"
format: markdown
---
This connection agent is used to read the list of users and resources from the AD server and synchronize it with the touchONE-server. The synchronization can run in the background every night, or it can be started manually.
For this connection agent, you need to have a service account with a password on behalf of which the lists of user and resource accounts are read.
The list of accounts can be read from the following servers:
- Microsoft 365 using Microsoft Graph
- Active Directory server using LDAP protocol
- Google Workspace using Google Calendar API, Google People API, Contacts API and Admin SDK API
For details, expand the procedures for the given server types below:
Microsoft 365
Connection agent for sending emails in Microsoft 365 needs an application registered in Azure AD. The procedure for creating an application is described here: [Registered app creating](https://cue.atlassian.net/wiki/spaces/M3SG/pages/255950885)
Use the procedure **Configuration For import resources and users** or **Configuration for Common app**.
> Macro (excerpt-include)
To create a new connection agent, press the ***+ NEW*** button in the top right corner and then ***NEW MICROSOFT 365*** in the section **For import resources and users**.
> Macro (excerpt-include)
> Macro (excerpt-include)
> Macro (excerpt-include)
#### > Macro (excerpt-include)
#### > Macro (excerpt-include)
#### Username
Enter here the username of the service account on behalf of which the list of user and resource accounts are read. For Microsoft 365, the username is typically in the email format, e.g. **touchone@contoso.com**.
> Macro (excerpt-include)
> Macro (excerpt-include)
> Macro (excerpt-include)
> Macro (excerpt-include)
> Macro (excerpt-include)
> Macro (excerpt-include)
Exchange server
For Exchange, you need the address of the Active Directory server. LDAP (Lightweight Directory Access Protocol) is used for communication.
To create a new connection agent, press the ***+ NEW*** button in the top right corner and then ***NEW EXCHANGE*** in the section **For import resources and users**.
> Macro (excerpt-include)
#### Server address
Here enter the Active Directory (AD) server address. If the AD server is running on the same machine as the Exchange server, enter the address of the Exchange server, e.g. “**exchange.contoso.com**”. This configuration is typically used for Small business editions of the Exchange server. If the AD server is running on a different machine, enter the address of that machine, e.g. “**ad1.contoso.com**”.
You can either enter the public IP address (if the server is accessible at this address, e.g. “**123.45.67.89**”), the internal IP address in the LAN network (e.g.”**192.168.1.2**”.), the local name of the server (e.g. “**ad1.contoso.local**”) or the global name of the server (if there is a public DNS record for it, e.g. “**exchange.contoso.com**”).
#### Username
Enter here the username of the service account behalf of which the list of user and resource accounts are read. For the AD and Exchange server, the username is typically in the format **username** or **domain/username**, e.g. **touchone** or **contoso/touchone**. If this is enabled on your Exchange/AD server, it can also be in email format, e.g. **touchone@contoso.com**.
> Macro (excerpt-include)
> Macro (excerpt-include)
#### Connection agent for API operations (used to read the working hours and time zone of resources)
Time zone and work hour information is not stored on the AD server and therefore cannot be read directly by this connection agent. This data is stored on the Exchange server. Therefore, if you want to synchronize both the working hours and the time zone resource, select the [Connection Agent for the API operations](https://cue.atlassian.net/wiki/spaces/TAM/pages/243105793) in this field with which the required data can be read.
> Macro (excerpt-include)
> Macro (excerpt-include)
> Macro (excerpt-include)
Google Workspace
For Google Workspace, you need a project with the appropriate APIs enabled, a certificate for secure communication, and an administrator account. The procedure for creating a project and a certificate is described here: [Configuration process](https://cue.atlassian.net/wiki/spaces/GWSG/pages/198672847)
To create a new connection agent, press the ***+ NEW*** button in the top right corner and then ***NEW GOOGLE*** in the section **For import resources and users**.
#### > Macro (excerpt-include)
#### Username
Enter here the username of the administrator account on behalf of which the list of user and resource accounts are read. For Google Workspace, the username is typically in the email format, e.g. **admin@contoso.com**.
> ℹ️ Because the operations for reading the resource and user list are part of the Admin SDK API, you need to specify an administrator account here.
#### Domain
Enter your domain here, e.g. **contoso.com**.
> Macro (excerpt-include)
> Macro (excerpt-include)
> Macro (excerpt-include)
> Macro (excerpt-include)
> Macro (excerpt)
>
> #### Synchronize working hours and time zone
>
> If this checkbox is checked, in addition to the list of accounts and resources, the time zone and working hours will also be loaded for each resource account.
> Macro (excerpt)
>
> #### Set up automatic remote resource/user synchronization every 24 hours
>
> Loading a list of users and resources can take a long time if you have many in your organization. Therefore, it is possible to set the list of available users and resources to automatically synchronize in the background in the early hours of each day. Then, when you import resources and users, there will be no need to wait for it to load and it will be available immediately. Check this checkbox to enable automatic synchronization. You can set the time when the automatic synchronisation will take place [here](https://cue.atlassian.net/wiki/spaces/TAM/pages/479166494).
> Macro (excerpt)
>
> ### Test connection agent
>
> Press the ***TEST ***button to test communication with the server.
>
> If the communication with the server goes well, the message **Test was successfull** will be displayed, otherwise the errors that occurred will be listed.