Office 365 / Exchange Permissions

Detailed Description

In order to bind to Microsoft Exchange, regardless of versions or type, the Simply Migrate Management Shell requires permissions to be set.
The following article explains how to configure the various types of permissions that can be used.

Set EWS Impersonation Rights Using PowerShell

  • Run Windows PowerShell.
  • Check the PowerShell version by typing cmdlet:
PS C:\Program Files\Simply Migrate> $PSVersionTable 
Name                           Value
----                           -----
PSVersion                      4.0
WSManStackVersion              3.0
SerializationVersion           1.1.0.1
CLRVersion                     4.0.30319.34014
BuildVersion                   6.3.9600.17400
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0}
PSRemotingProtocolVersion      2.2

An empty response indicates that you are running Windows PowerShell V1.0.

If the Exchange Server is in a remote location (i.e hosted or you are connecting to Office 365) you will be required to run PowerShell remotely, or bind to your Exchange instance. To manage permissions locally (Connected to your Exchange server via RDP, or via a remote PowerShell session) execute the following commands in EMS Exchange Management Shell.
Check if the account in question already has the impersonation rights assigned.

[PS] C:\Program Files\Simply Migrate> Get-ManagementRoleAssignment -RoleAssignee Service_Account_Being_Used -Role ApplicationImpersonation -RoleAssigneeType user

NOTE Service_Account_Being_Used should be replaced with the account name you are intending to use.
NOTE If no response is recieved from the above command, your account does NOT have the required permissions, and the following command should be run.

To add Impersonation rights

[PS] C:\Program Files\Simply Migrate> New-ManagementRoleAssignment –Name:A_Friendly_Name_For_This_Assignment –Role:ApplicationImpersonation –User: Service_Account_Being_Used

NOTE A_Friendly_Name_For_This_Assignment should be replaced with a friendly name you are intending to use for this assignment.
NOTE Service_Account_Being_Used should be replaced with the account name you are intending to use.

To remove an Impersonation rights

[PS] C:\Progra Files\Simply Migrate> Get-ManagementRoleAssignment -RoleAssignee Service_Account_Being_Used -Role ApplicationImpersonation -RoleAssigneeType user | Remove-ManagementRoleAssignment

NOTE Service_Account_Being_Used should be replaced with the account name you are intending to use.

Set EWS Impersonation Rights Using Office 365 Exchange Admin centre

Connect to the Office 365 administrators portal.
Once there, expand the Admin Centres and select Exchange

Office 365 Admin Centre

This opens up the Exchange admin centre.
Click on Admin roles under the Permissions section.

Click admin roles under Permissions

Add a new role by clicking the +

Add new role

Give the new role a suitable name and description. Remember, this role can be deleted once your migration is completed so best to give it a project specific name so that it is clear why this role was created.

Assign a name to the role.

Select ApplicationImpersonation
Click the add button
Click OK.

Add ApplicationImpersonation

Add the user account that Simply Migrate will be connecting to Exchange as to the members section.

Add service account

Click Save.

You’ve got time for a coffee break while the permissions take effect.  You’re all done.