Pick the cloud in Add an account: AWS, Oracle Cloud (OCI) or Google Cloud. A line under the form says what the credential may do.
Give the account a short name and fill in the credential fields. Make the credential read-only: Vantage only lists machines and never creates, changes or deletes anything.
Press Add account. The credential goes to this Mac's keychain and is never shown again.
In Add machine, pick the account to list its machines and see which already run the agent.
Pick a machine from the list to add it over SSH.
Something not working?
The account is refused: check that the credential is read-only, not expired, and that the scope field (region or project) is right.
A machine is missing from the list: it is in another region or project than the one named in the scope field.
Remove an account you no longer use from the list on this page.