Configuring Application Impersonation to ingest data into Exchange 2010 / 2013 / 2016 (4242555)

Issue
For Archive Shuttle 6.6 and later, or on-prem Cloud Commander source/targets to ingest data into an Exchange 2010, 2013, or 2016 mailbox or personal archive, the accounts used need to be granted extra permissions. This article explains how to do that.
Solution
The following PowerShell command needs to be executed in order for the permissions to be granted:

[PS]C:\>New-ManagementRoleAssignment -Name:VaultAdminImpersonation -Role:ApplicationImpersonation -User:Domain\UserName

The user account to specify at the end of the command is the service account being used for ingestion. There are two ways to configure multiple ingestion accounts:

• Instead of using a username in the above command, use a security group and then add accounts to that security group in order for them to be given Application Impersonation rights.
• Perform the above command multiple times. Note the Name parameter needs to be unique each time. So, instead of VaultAdminImpersonation, a name matching the username could be used.

Note: If Exchange 2007 is used, use this article instead.