Errors migrating from 1 tenant to another: "doesn't have write permission to target DC" (4328836)

What is causing this error: Source server:..prod.outlook.com doesn't have write permission to target DC:..prod.outlook.com.

Usually it indicates that target forest isn't an account partition of source forest. Additional information: Access is denied. Active directory response: 00000005: SecErr: , problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Product is not properly configured.

It could be one of the following issues;

1. Account has been mistyped.
2. Account has an incorrect suffix.
3. EWS url is not populated

1). Correct Account information

2). Specify an EWS endpoint

Open On Demand dashboard
Click Accounts
Click Configure Connections on the Account migration Dashboard.
In the Configure Connections dialog select the tenant
Click Edit.
At Advanced Options specify an EWS endpoint.
M365 the URL is: https://outlook.office365.com/EWS/Exchange.asmx