How to enable application impersonation rights for Exchange 2010/2013/2016/2019?? (4374697)

To migrate data from Exchange 2010/2013/2016/2019 you must enable Application Impersonation for the migration administrator account. This allows the migration administrator to impersonate all users on all your client access servers.

To enable Application Impersonation rights, use role-based access controls, and create a role group that has Application Impersonation rights.

• For Exchange 2010, see https://msdn.microsoft.com/en-us/library/bb204095(v=exchg.140).aspx.
• For Exchange 2013 and above, see https://msdn.microsoft.com/en-us/library/office/dn722376(v=exchg.150).aspx.

To create a role group for impersonation, use the PowerShell cmdlets from the articles above. The following is a step by step guide for creating the impersonation role and assigning a user to that role.

1. Log in to your Exchange server, or to a machine that has the Exchange Administration tools installed on it as an Exchange administrator.
2. Run Exchange Management Shell.
    
3. Run the cmdlet to create the management role group and assign the ApplicationImpersonation role to that group, and then assign the user you want to use as a migration administrator.

In the following example, we are using the user migAdmin@example.com.

New-RoleGroup -Name MigrationImpersonation -Roles ApplicationImpersonation -Members migAdmin@example.com

You can add multiple users using commas to separate each user.