Errors migrating from 1 tenant to another: "doesn't have write permission to target DC" (4328836)

What is causing this error: Source server:..prod.outlook.com doesn't have write permission to target DC:..prod.outlook.com.

Usually it indicates that target forest isn't an account partition of source forest. Additional information: Access is denied. Active directory response: 00000005: SecErr: , problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Product is not properly configured.

It could be one of the following issues;

1. Account has been mistyped.
2. Account has an incorrect suffix.
3. EWS url is not populated

1). Correct Account information

2). Specify an EWS endpoint

Open On Demand dashboard
Click Accounts
Select the Dashboard tab
Click Configure Connections 
In the Configure Connections dialog select the tenant
Click Edit.
At Advanced Options specify an EWS endpoint. (EWS endpoint should match the type of tenant from the list below)
M365 the URL is: https://outlook.office365.com/EWS/Exchange.asmx

• Worldwide: https://outlook.office365.com/EWS/Exchange.asmx
• GCC High: https://outlook.office365.us/EWS/Exchange.asmx
• DOD: https://outlook-dod.office365.us/EWS/Exchange.asmx
• China: https://partner.outlook.cn/EWS/Exchange.asmx