On Demand Migraiton tasks are failing with "The term XXXXXXX is not recognized as the name of a cmdlet, function, script file, or operable program. (4374254)

On Demand Migration tasks like account discovery or Email migration are failing with ""The term XXXXXXX is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again., Tenant : domain.com" or similar error.

This is caused by missing permissions to the Azure APPs ODM Deploy in the Tenants.

Please check and perform the following troubleshooting to ensure all is correctly assigned. 

1. Make sure all the consents are correctly provided. If needed, the consent can be directly granted in the Microsoft Entra Admin Center > Applications > Enterprise Applications >  Search for Quest > Open the application and Select Permissions
2. If the problem continues check that in the Microsoft Entra Admin Center > Show more Menu > Roles & Admins > Search for the Exchange Administrator Role > In active Assignment ensure that one of the following Azure Apps are assigned: 

                              Quest On Demand - Migration - Basic - Full
                              Quest On Demand - Migration - Basic - Minimal

       3. If the problem continues you will need to connect to the affected Exchange Admin Center > Roles > Admin Roles > Organization Management > Assigned and ensure the Exchange Administrator is a member. In case the membership is missing you will need to use Powershell to assign the Role. 

     4.  If the problem continues ensure the Organization Management role has all the needed permissions to run the powershell cmdlets use by ODM. Connect via PowerShell and run the attached script that will identify if there are any missing permissions on the Organization Management Role.

Example: New-ManagementRoleAssignment -Role "Mail Recipient Creation" -SecurityGroup "Organization Management" 

5. Ensure that the ExchangeServiceAdmins_-XXXXXXXXX role has all needed permissions assigned in the Exchange Online Admin portal:

• Audit Logs
• Compliance Admin
• Data Loss Prevention
• Distribution Groups
• Federated Sharing
• Information Rights Management
• Journaling
• Legal Hold
• Mail Enabled Public Folders
• Mail Recipient Creation
• Mail Recipients
• Mail Tips
• Mailbox Import Export
• Mailbox Search
• Message Tracking
• Migration
• Move Mailboxes
• MyBaseOptions
• MyContactInformation
• MyDisplayName
• MyDistributionGroupMembership
• MyDistributionGroups
• MyMailboxDelegation
• MyMailSubscriptions
• MyName
• MyProfileInformation
• MyRetentionPolicies
• MyTextMessaging
• MyVoiceMail
• O365SupportViewConfig
• Organization Configuration
• Organization Transport Settings
• Public Folders
• Remote and Accepted Domains
• Reset Password
• Retention Management
• Role Management
• Security Admin
• Security Group Creation and Membership
• Security Reader
• Transport Rules
• User Options
• View-Only Audit Logs
• View-Only Configuration
• View-Only Recipients