This manual refers to an old version of CodeTwo Office 365 Migration. Go here if you use the latest version.

Connecting to target Office 365

Once you installed CodeTwo Office 365 Migration and configured a source environment, it is time to create a connection to your target Office 365 server.


The program uses Exchange Web Services (EWS) to connect to a target Office 365 environment.

To configure a target connection, you need to launch the Target server connection wizard. There are two ways to do that:

  • click the Settings (Office 365 Migration settings button temp) button on the Defined target server connections card, and then click New (Fig. 1.); or
  • click Create a new migration job on the How to start card, go to the Target mailboxes step, and then choose Add new target connection from the Target server drop-down list.

Office 365 Migration new target connection
Fig. 1. Creating a new target server connection.

Either way, the Target server connection wizard will open. First, choose if you want to connect to Office 365 global or to Office 365 Germany (Fig. 2.). Since Office 365 Germany and Office 365 global (or simply Office 365) are completely independent clouds, it is not possible to use the Office 365 global credentials to log in to Office 365 Germany and vice versa. If your onmicrosoft email address ends with .de, for example, you’re using the Office 365 Germany cloud. Read more about Office 365 Germany.

Office 365 Migration target connection wizard 1a
Fig. 2. Selecting Office 365 cloud.

Next, in the Admin account step, provide credentials of the Office 365 admin account that will access user mailboxes on your target server and, if necessary, create new ones. Make sure that this account is assigned the necessary management roles, as shown in the wizard (Fig. 3.), or let the program do it for you in the next step (learn more about the target account requirements).

We also recommend to enter the primary email address from the * domain for this account (or * in the case of Office 365 Germany), for example This will help prevent any issues if you change the domain on your target server during the migration. Learn more.

Click Next to proceed.

Office 365 Migration target connection wizard 1
Fig. 3. Providing admin account credentials.


If this admin account has multi-factor authentication (MFA) enabled, use the app password instead of the regular Office 365 password. Otherwise, the configuration will fail. Learn more.

In the next step, Configuration, the wizard will set up the connection to your target Office 365 server. Click Configure and verify the results. In case the account provided in the previous step lacks some of the necessary roles, the program will attempt to assign them automatically (Fig. 4.). Click Yes to accept.

Office 365 Migration target connection wizard 2
Fig. 4. Assigning the missing management roles.


Some of these roles are optional if certain conditions are met. For example, the Public Folders role is only necessary if you plan to migrate public folders, while the User management administrator role is needed to create new mailboxes on the target server by the program. Clear the appropriate checkboxes (Fig. 5.) if you don't want to assign any of these optional roles to the used admin account.

Office 365 Migration target connection wizard 2b
Fig. 5. Assigning optional management roles.

It may be necessary to provide the credentials of another account that is assigned the Global administrator role (Fig. 6.). This account will not be used to connect to the Office 365 tenant to perform the migration, but only to assign the missing roles. Learn more about the management roles.

o365 Migration troubleshooting providing admin cre
Fig. 6. Providing credentials of an account that has appropriate roles assigned.


Remember to use the app password if your Global administrator account is also MFA-enabled. Otherwise, you will not be able to assign the missing roles by using this account.

When your configuration is successfully completed (as shown in Fig. 7.), click Finish to save it and exit the wizard.

Office 365 Migration target connection wizard 2
Fig. 7. Successful connection with a target server.

If you encounter any problems, see Troubleshooting.

Your new connection will appear in the Defined target server connections card (Fig. 8.) on the program's Dashboard.

Office 365 Migration defined target connection
Fig. 8. Defined target server connections.


You cannot use the same email address (UPN) to configure multiple connections to the target tenant. To configure another connection to the same Office 365 tenant, use the credentials of another administrator.

See next

Configuring a migration job

Managing server connections

Was this information useful?