How To: Grant Impersonation Rights in Microsoft Exchange 2010 (4319963)

To migrate data to or from Exchange 2010 the Administrator account must have ApplicationImpersonation rights in the Exchange Organization.

To grant Impersonation Rights:

1. Open the Exchange 2010 Management Shell
2. Use the New-ManagementRoleAssignment command in Windows PowerShell to create a new role assignment for the ApplicationImpersonation role. For example, if the Admin account is called userName the command is:
   
   New-ManagementRoleAssignment -Name:MigrationImpersonationAssignment -Role:ApplicationImpersonation -User:userName

To migrate from a hosted Exchange environment the RecipientOrganizationalUnitScope will need to be used to specify the OU of the users on Exchange server.

New-ManagementRoleAssignment -Name:MigrationImpersonationAssignment -Role:ApplicationImpersonation -User:userName -RecipientOrganizationalUnitScope "domain.com/Microsoft Exchange Hosted Organizations/company.com"

For more information on this Exchange 2010 command refer to the technet site: https://technet.microsoft.com/en-us/library/dd335193(v=exchg.141).aspx