Cloudiway uses impersonation for accessing mailboxes (read or write)
If the account defined in the connector is the administrator of the tenant, impersonation will automatically be configured.
This procedure is provided in case you need to set the permissions manually.

This article explains how to give the impersonation permissions to the account that will be used as migration account.

Method 1: using PowerShell

$cred = Get-Credential (Note : Enter the credential of a full administrator account)
$s = New-PSSession -ConfigurationName Microsoft.Exchange –ConnectionUri -Credential $cred -Authentication Basic –AllowRedirection
Import-PSSession $s
New-ManagementRoleAssignment –Name “Impersonation MAAS ” –Role “ApplicationImpersonation” –User “”

    For Exchange 2007, use the following cmdlets:

Get-ExchangeServer | Add-ADPermission -User DOMAIN\USERNAME -extendedRights ms-Exch-EPI-Impersonation -InheritanceType none
Get-MailboxDatabase | Add-ADPermission -User DOMAIN\USERNAME -extendedRights ms-Exch-EPI-May-Impersonate -InheritanceType none

Method 2 : using the Office 365 Exchange Admin Center

  • Login to the Office 365 Exchange Admin Center.
  • Select “Permissions” from the navigation tree.
    Office 365 role management
  • Click on “Admin Roles”.
  • Click the “+” Icon to add a new role.
  • In the role group dialog box Provide a name for your Role Group (ie. “Impersonation for migration”).
  • Under Role click the “+” icon to add a Role.
  • Select ApplicationImpersonation”, click “add” and then click OK.
    Add Office 365 role
  • Under Members click the “+” icon to add a new member to the RoleGroup.
  • Select your admin account that will perform the migrations, click “add”, and then click OK.
    Add Office 365 role
  • Click Save.