Migrating Group mailbox is failing with error: "The remote server returned an error: (403) Forbidden. (The request failed. The remote server returned an error: (403) Forbidden.)" (4374198)
Migrating Group mailbox is failing with error: "The remote server returned an error: (403) Forbidden. (The request failed. The remote server returned an error: (403) Forbidden.)"
说明
When trying to migrate a Group mailbox for Teams or M365 Group, it is failing with error: "The remote server returned an error: (403) Forbidden. (The request failed. The remote server returned an error: (403) Forbidden.)" when temporary migration account is used.
Note: the issue can also happen with the cloud-only tenant, where service account was created through Microsoft PIM
原因
The issue was caused by Application Access Policy or Conditional Access Policy.
解决办法
Add the temporary migration account (or account which granted consent) to the application/conditional access policy to avoid the error.
For other type of mailboxes please see another knowledge base.
其他信息
More details about temporary migration account can be found:
https://support.quest.com/technical-documents/on-demand-migration/current/user-guide/20#TOPIC-1661360