Error:
[1/2]Unable to read label and protection from '[Ext] New Labels' with tenant 'domain.com'. The label or protection may have been applied by a different tenant. The service didn't accept the auth token.
Labels from external tenants are not supported - this is the expected behaviour when an email is coming from a different tenant with a different label. Unfortunately we cannot migrate the email with the label option included in the task.