Yes, you may remove the Global Administrator role from the admin account after the project is configured. Note, If Domain Move Migration is in-scope of the project, the Global Administrator role must be added back to the account during an active domain move as it is required to remove the domain from the source tenant and add it to the target tenant.
Introduction
Setup
Enable Rewrite
Disable Rewrite
Frequently Asked Questions
Can I use a wild card certificate for Domain Rewrite Service?
Can I remove Global Administrator from my account after creating my project?
Do I have to modify my domain SPF record when using ERS?
How can I check if my email has been processed by Domain Rewrite Service?
How can administrators confirm Domain Rewrite service has been configured for my tenants?
Will Domain Rewrite work for a source mailbox that has a contact object in the target tenant?
Do I need to configure a Local Directory Sync agent if my tenant is a hybrid with local Active Directory attached?
How are Transport Rules & Send Connectors used?
How does Mail Flow work with Domain Rewrite?
Can I exclude Domain Rewrite for specific recipients?
How do I install and configure Directory Sync agents?
How do I uninstall an agent?
Does Domain Rewrite modify messages sent between the Source and Target tenants?
How does Domain Rewrite select which email address to use for the rewrite?
Will Domain Rewrite continue working if I delete the matched target account?
Can I configure Domain Rewrite between multiple source tenants and a single target tenant?
How can I utilize the new Domain Rewrite Setup options if I configured Domain Rewrite Service in the old Domain Rewrite?
Can I remove Global Administrator from my account after creating my project?
Do I have to modify my domain SPF record when using ERS?
When planning the deployment of Domain Rewrite Service we recommend the following regarding Sender Policy Framework (SPF) records:
Update your existing SPF record to include the On Demand Migration Domain Rewrite list of acceptable domains. This will prevent any hard failures when routing mail through the Rewrite Relay Service.
Include one of the following domains with your SPF record from all source and target domains participating in Domain Rewrite based on the region where your On Demand Migration Domain Rewrite project is configured.
Global Record which includes all region-specific records
-
spf.odmad.quest-on-demand.com
On Demand region-specific records
US
-
spf.us.odmad.quest-on-demand.com
Canada
-
spf.ca.odmad.quest-on-demand.com
EMEA
-
spf.eu.odmad.quest-on-demand.com
United Kingdom
-
spf.uk.odmad.quest-on-demand.com
Australia
-
spf.au.odmad.quest-on-demand.com
How can I check if my email has been processed by Domain Rewrite Service?
Administrators can confirm if the message has been processed by Domain Rewrite Service by submitting a message trace in Microsoft 365 admin portal or review the message header.
How can administrators confirm Domain Rewrite service has been configured for my tenants?
How can administrators confirm Domain Rewrite service has been configured for my tenants?
Administrators may verify the configurations from the Microsoft 365 Exchange Online Administrator Portal.
To verify by portal, simply login to the Exchange Online Admin Portal. Then navigate to Mail Flow. Under Mail Flow you will find the rules and connectors like the ones show below.
