Refer to System Requirements and Access Rights document for the Migration Agent for Exchange (MAgE) requirements.
The administrative accounts used for public folder synchronization requires the following minimal permissions
To set the target administrative account perform the following steps;
|
IMPORTANT: The account assigned to be a target Office 365 administrative account used by Migration Agent for Exchange should meet the following requirements:
|
The following permissions are required for target Office 365 administrative account used by Migration Agent for Exchange during public folder synchronization:
Permission |
Used for | Used by | How to Grant |
---|---|---|---|
The Public Folders management role | Getting access permissions to perform public folder migration | MAgE and MMEX PowerShell module | Office 365 account: Granting the Public Folders Role |
The View-Only Configuration management role | Getting organization configuration data | MAgE and MMEX PowerShell module (Get-OrganizationConfig) | Office 365 account: Granting the View-Only Configuration Role |
Owner permission for each public folder you want to synchronize | Creating and syncing content and permissions (including Migration Manager Recycle Bin, if applicable) | MAgE and MMEX PowerShell module | Office 365 account: Granting Public Folder Owner Permission |
CreateSubfolders and FolderVisible access rights to the root public folder folder (“\”) * | Creating Migration Manager Recycle Bin folder | MAgE and MMEX PowerShell module |
Office 365 account: Granting CreateSubfolders and FolderVisible access rights to the root folder |
Mail Recipients and Mail Enabled Public Folders management roles | Syncing Mail Public Folders properties | MAgE and MMEX PowerShell module for Sync-MMExMailPublicFolder | Office 365 account: Granting the Mail Recipients and Mail Enabled Public Folders Roles |
Distribution Groups management role | Syncing Public Folder Client permissions for Distribution Groups | MAgE and MMEX PowerShell module for Set-MMExGroupMatching | Office 365 account: Granting the Distribution Groups Role |
* it is required only to create Migration Manager Recycle Bin from MMEx PoSh scripts, but if admin created it manually, he/she can skip it. Make sure Exchange Organization Account has Owner client permission for Migration Manager Recycle Bin folder.
Notify your users that they should expect to see this account as the owner of their public folders. Consider setting an informative display name for this account.
To set the target administrative account perform the following steps;
|
Caution: Consider, in case you decide to change account in Mailbox Migration Job or Calendar Synchronization Job properties later, this account for access to Exchange will be used instead the target administrative account you specified using Add Source Organization Wizard. To avoid any issues, it is not recommended to use multiple administrative accounts. |
|
IMPORTANT: The account assigned to be a target administrative account used by Migration Agent for Exchange should have a mailbox. |
The following permissions are required for target Exchange account used by Migration Agent for Exchange during public folder synchronization:
Permission |
Used for | Used by | How to Grant |
---|---|---|---|
Read permission for the Microsoft Exchange container in the Configuration partition of source Active Directory (including all descendant objects) | Adding source Exchange organization using the Add Source Organization Wizard | MMEx console | Granting Read Permission to Microsoft Exchange Container |
The Public Folders management role | Getting access permissions to perform public folder migration | MAgE and MMEX PowerShell module | Granting the Public Folders Role |
The View-Only Configuration management role | Getting organization configuration data | MAgE and MMEX PowerShell module (Get-OrganizationConfig) |
|
Owner permission for each public folder you want to synchronize | Creating and syncing content and permissions (including Migration Manager Recycle Bin, if applicable) | MAgE and MMEX PowerShell module | Granting Owner permissions for each Public Folder |
CreateSubfolders and FolderVisible access rights to the root public folder folder (“\”) * | Creating Migration Manager Recycle Bin folder | MAgE and MMEX PowerShell module | Granting CreateSubfolders and FolderVisible access rights to the root folder |
Mail Recipients and Mail Enabled Public Folders management roles | Syncing Mail Public Folders properties | MAgE and MMEX PowerShell module for Sync-MMExMailPublicFolder | Granting the Mail Recipients and Mail Enabled Public Folders Roles |
* It is required only to create Migration Manager Recycle Bin from MMEx PoSh scripts, but if admin created it manually, he/she can skip it. Make sure Exchange Organization Account has Owner client permission for Migration Manager Recycle Bin folder.
Notify your users that they should expect to see this account as the owner of their public folders. Consider setting an informative display name for this account.
To set the source administrative account perform the following steps;
|
NOTE: Consider, in case you decide to change account in Mailbox Migration Job or Calendar Synchronization Job properties later, this account for access to Exchange will be used instead the source administrative account you specified using Add Source Organization Wizard. To avoid any issues, it is recommended to select one administrative account to use. |
|
IMPORTANT: The account assigned to be a source administrative account used by Migration Agent for Exchange should have a mailbox. |
The following permissions are required for source Exchange 2010 administrative account used by Migration Agent for Exchange during public folder synchronization:
Permission |
Used for | Used by | How to Grant |
---|---|---|---|
Read permission for the Microsoft Exchange container in the Configuration partition of the source Active Directory (including all descendant objects | Adding source Exchange organization using the Add Source Organization Wizard | MMEx console | Granting Read Permission to Microsoft Exchange Container |
The Public Folders management role | Getting access permissions to perform public folder migration | MAgE and MMEX PowerShell module | Granting the Public Folders Role |
Owner permission for each public folder you want to synchronize*. | Creating and syncing content and permissions (including Migration Manager Recycle Bin, if applicable) | MAgE and MMEX PowerShell module | Granting Owner Permission for Public Folders |
Full access right to the root public folder folder (“\”) ** | Creating Migration Manager Recycle Bin folder | MAgE and MMEX PowerShell module | Granting Full Access Permission of public folder to an account |
|
TIP: * In case the one-way synchronization is selected, at least Read permission for each public folder you want to synchronize can be granted to make permissions more granular. ** It is required only to create Migration Manager Recycle Bin from MMEx PoSh scripts, but if admin created it manually, he/she can skip it. Make sure Exchange Organization Account has Owner client permission for Migration Manager Recycle Bin folder. |
To set the source administrative account perform the following steps;
|
NOTE: Consider, in case you decide to change account in Office 365 Mailbox Migration Job or Office 365 Calendar Synchronization Job properties later, this account for access to Exchange will be used instead the source administrative account you specified using Add Source Organization Wizard. To avoid any issues, it is recommended to select one administrative account to use. |
|
IMPORTANT: The account assigned to be a source administrative account used by Migration Agent for Exchange should have a mailbox. |
The following permissions are required for source Exchange 2013/2016/2019 administrative account used by Migration Agent for Exchange during public folder synchronization:
Permission |
Used for | Used by | How to Grant |
---|---|---|---|
Read permission for the Microsoft Exchange container in the Configuration partition of the source Active Directory (including all descendant objects) | Adding source Exchange organization using the Add Source Organization Wizard | MMEx console | Granting Read Permission to Microsoft Exchange Container |
The Public Folders management role | Getting access permissions to perform public folder migration | MAgE and MMEX PowerShell module | Granting the Public Folders Role |
Owner permission for each public folder you want to synchronize. | Creating and syncing content and permissions (including Migration Manager Recycle Bin, if applicable) | MAgE and MMEX PowerShell module | Granting Owner permissions for each Public Folder |
The View-Only Configuration management role* | Creating and syncing content and permissions (including Migration Manager Recycle Bin, if applicable) | MAgE and MMEX PowerShell module | Granting the View-Only Configuration Role |
CreateSubfolder and FolderVisible access rights to the root public folder (“\”) ** | Creating Migration Manager Recycle Bin folder | MAgE and MMEX PowerShell module |
Granting CreateSubfolders and FolderVisible access rights to the root folder |
|
TIP: * In case the one-way synchronization is selected, at least Read permission for each public folder you want to synchronize can be granted to make permissions more granular. ** It is required only to create Migration Manager Recycle Bin from MMEx PoSh scripts, but if admin created it manually, he/she can skip it. Make sure Exchange Organization Account has Owner client permission for Migration Manager Recycle Bin folder. |
Refer to Specific Case Workarounds for instructions on how to resolve the specific cases related to public folder hierarchy changes.
Refer to Specific Case Workarounds for instructions on how to resolve the issues related to public folder hierarchy change.
This section help you to perform the following tasks related to the public folder synchronization using PowerShell cmdlet toolkit:
© ALL RIGHTS RESERVED. Feedback 利用規約 プライバシー Cookie Preference Center