You must create an API role and API client in Jamf Pro before you install the Jamf AD CS Connector because you will need an API client ID and client secret during installation.
For instructions, see API Roles and Clients in the Jamf Pro Documentation.
After you have created an API role and API client, return to this document and complete the remaining steps. Make sure the API role has the "Read AD CS Certificate Jobs" and "Update AD CS Certificate Jobs" privileges.