How to assign the ApplicationImpersonation role in Office 365?
Solved Cloud & Migration
BA
Barry Allen
February 27, 2020
2 replies
5,240 views
Reviewed by moderators

Our migration tool refuses to touch other mailboxes and its docs say the admin account needs ApplicationImpersonation rights. Where exactly is this assigned in Microsoft 365?

Accepted Answer
Verified by David Taylor, Community Expert ยท Reviewed February 2020

Quickest is PowerShell. Connect to Exchange Online then run New-ManagementRoleAssignment -Role "ApplicationImpersonation" -User admin@yourtenant.com.

GUI route: Exchange admin center, Roles, Admin roles, create a role group, add the ApplicationImpersonation role and put your admin in it. Either way allow 15 to 60 minutes for the assignment to propagate before retrying the tool. That wait catches almost everyone.

PowerShell one-liner plus a 30 minute wait and the tool sees every mailbox. Solved.