Steps to set Impersonation rights for Office 365

Note: EdbMails application will automatically set Impersonation rights. If the automatic configuration is not successful then the appropriate message will be displayed to set the rights manually.

  • PowerShell commands to set Impersonation rights

    Note:
    1. If the login through admin user is failing then try to impersonate any other User.
    2. Make sure the impersonated user account has impersonation permissions to each associated Mailbox (Users). That's, impersonated user should have impersonation permissions to all the associated Mailboxes.

     

    Execute the below commands in PowerShell (Run as Administrator)

    Office 365 Migration

    1. Click on the Windows Start button.

    2. Search for Windows PowerShell (PowerShell should already be installed).

    3. Start PowerShell under an administrator context (right-click -> run as administrator)

     

    Step 1:

    Command: Copy & Paste it on PowerShell

    Set-ExecutionPolicy Unrestricted

    Result:
    admin-account

    Step 2:

    Command: Copy & Paste it on PowerShell

    $LiveCred = Get-Credential

    Enter the User Name (SMTP) and Password of Office 365 account having Global Admin credentials.

    Result:
    live-credentials

    Step 3:

    Command: Copy & Paste it on PowerShell

    $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $LiveCred -Authentication Basic -AllowRedirection

    Result:
    session

    Step 4:

    Command: Copy & Paste it on PowerShell

    Import-PSSession $Session

    Result:
    import

    Result:
    import-session

    Step 5:

    Command: Copy & Paste it on PowerShell

    Enable-OrganizationCustomization

    Ingore this results, if the error is "This operation is not required. Organization is already enabled for customization."

    Result:
    enable-organization

    Step 6:

    Command: Copy & Paste it on PowerShell & change User

    New-ManagementRoleAssignment -Role "ApplicationImpersonation" -User user@domain.com

    Result:
    management-roles


    Note: Click here to know the steps to set Impersonation rights using GUI