MAgE not processing. Error: "Quest.MigrationManager.Exchange.Basis.ADSCPHelper.SetSCP Error: Exception: System.UnauthorizedAccessException" (4338365)

MAgE not processing. Error: "Quest.MigrationManager.Exchange.Basis.ADSCPHelper.SetSCP Error: Exception: System.UnauthorizedAccessException"

The MAgE logs the following error:

QMMEXBasis|Quest.MigrationManager.Exchange.Basis.ADSCPHelper.SetSCP Error: Exception: 
System.UnauthorizedAccessException: Access is denied.

   at Quest.MigrationManager.Exchange.Basis.ADSCPHelper.SetSCP(ProjectIndex projectIndex, String serviceBindingInformation)
   at Quest.MigrationManager.Exchange.Basis.ComplexSCPHelper.SetSCP(ProjectIndex projectIndex, String serviceBindingInformation)
   at Quest.MigrationManager.Exchange.View.InstallAgentUtilsCore.SetProjectInfoToAgentSCP(String agentHostName, String instanceName, ICredential cred, IProject prj, Guid ProjectGuid)
   at Quest.MigrationManager.Exchange.View.InstallAgentUtilsCore.OnSimpleInstallAgent(Object[] args)
   at Quest.MigrationManager.Exchange.View.Wizard.Exchange2ExchangeJobWizard.<>c__DisplayClass10.<GetInstallAgentsActionItem>b__e(DoActionHandlerViewItem log, Object[] args)
   at Quest.MigrationManager.Exchange.View.DoActionHandlerViewItem.Handle()
   at Quest.MigrationManager.Exchange.View.Wizard.ConfigActionWizard.ExecuteActions(Object arg)
 on 
   at Quest.MigrationManager.Exchange.Basis.ADSCPHelper.SetSCP(ProjectIndex projectIndex, String serviceBindingInformation)
   at Quest.MigrationManager.Exchange.Basis.ComplexSCPHelper.SetSCP(ProjectIndex projectIndex, String serviceBindingInformation)
   at Quest.MigrationManager.Exchange.View.InstallAgentUtilsCore.SetProjectInfoToAgentSCP(String agentHostName, String instanceName, ICredential cred, IProject prj, Guid ProjectGuid)
   at Quest.MigrationManager.Exchange.View.InstallAgentUtilsCore.OnSimpleInstallAgent(Object[] args)
   at Quest.MigrationManager.Exchange.View.Wizard.Exchange2ExchangeJobWizard.<>c__DisplayClass10.<GetInstallAgentsActionItem>b__e(DoActionHandlerViewItem log, Object[] args)
   at Quest.MigrationManager.Exchange.View.DoActionHandlerViewItem.Handle()
   at Quest.MigrationManager.Exchange.View.Wizard.ConfigActionWizard.ExecuteActions(Object arg)

The service account lacks permission to create an SCP (Service Connection Point) for the agent in the domain where it is installed on the following LDAP path:
CN=Exchange Migration Project,CN=QmmEx,CN=Migration Manager,CN=Quest Software,CN=System,DC=Domain,DC=Com

Grant the service account the correct permissions as per https://support.quest.com/technical-documents/DOC260525

The specific permissions required are the special permissions called:
 create serviceConnectionPoint objects
 and 
 delete serviceConnectionPoint objects 
 
The service account will also require some additional rights to read and create the structure below CN=System,DC=Domain,DC=Com.  An easy method to achieve the necessary permissions is to:

1. Grant the service account Full Control to CN=System,DC=Domain,DC=Com
2. Start the MAgE, allow the LDAP hierarchy to be created  and the SCP then stop the MAgE
3. Change the permission to Read instead of Full Control
4. Assign the special permissions to CN=Exchange Migration Project,CN=QmmEx,CN=Migration Manager,CN=Quest Software,CN=System,DC=Domain,DC=Com and all child objects.
5. Start the MAgE