# Enable VM onboarding (Amazon Web Services Management Console) To enable VM onboarding in the Amazon Web Services Management Console: 1. Open the Systems Manager console. In the navigation pane, choose **Hybrid and Multicloud nodes**. 1. Choose the Cloud Connector for which you want to enable VM onboarding. 1. Choose **Install and configure SSM Agent**. 1. Configure the following settings: GCP Region selection Choose whether to enable all GCP Regions (recommended) or select specific Regions where your VMs are located. State Manager association role (automation dispatch role) The IAM role that State Manager assumes to dispatch automation executions. This role passes the Automation execution role to Automation when launching the onboarding workflow. For the trust policy and permissions required by this role, see [Automation dispatch role](cloud-connector-gcp-automation-dispatch-role.md). Automation execution role (automation assume role) The IAM role that Automation assumes to execute the agent installation runbook. This role assumes the GCP federation role to authenticate with GCP through OIDC, creates hybrid activations, and manages managed instances. For the trust policy and permissions required by this role, see [Automation assume role](cloud-connector-gcp-automation-assume-role.md). Hybrid activation instance role The IAM role assigned to GCP VMs when they register as managed instances. This role must trust `ssm.amazonaws.com` and have the `AmazonSSMManagedInstanceCore` policy attached. For more information, see [Managed instance role](cloud-connector-gcp-managed-instance-role.md). VM tags Optionally, add tags to apply to managed instances during onboarding. The `CloudConnector` tag is applied automatically (see [Tags applied to managed instances](cloud-connector-gcp-managed-instance-tags.md)). You can add more tags to further organize your managed fleet. 1. Choose **Connect**. Systems Manager creates the association and begins onboarding GCP VMs. You can monitor the progress on the connector details page.