Briefly, what permissions for Active Directory & Exchange are required for a migration?
Firstly, it is recommended that you use two different accounts, one for AD and one for Exchange.
The permisisons required for Active Directory are:
- Domain Administrator as the Primary Group
Note: To tighten security you can assign domain admin permissions only to an OU and not the entire domain!
The permisisons required for Exchange are:
- Exchange View Only administrator
- Receive-as rights on each required mail store in which you are migrating to