Troubleshooting ApplicationImpersonation role assignment

When configuring the connection to a source on-premises Exchange server, the connection wizard checks if the provided admin account is assigned the ApplicationImpersonation role. If the role is missing, the Configuration step fails (Fig. 1.), as the program is not able to access user mailboxes. You also get the following error: 

Role 'ApplicationImpersonation' is not assigned to admin account

O365 Migration troubleshooting AppImpers fail
Fig. 1. The error displayed when your admin account
is not assigned the required management role.


If the program is unable to check the roles assigned to the admin account, it means that the used account does not have the View-Only Configuration role assigned (learn more).

To continue with the configuration, the program will attempt to assign the ApplicationImpersonation role automatically (Fig. 2.), as well as other missing roles. Click Yes to proceed.

O365 Migration troubleshooting rec assigning roles
Fig. 2. Automatically assigning the missing management roles.


Some of the management roles are optional if certain are met. Learn more here.

If the program is unable to assign the missing roles, it means that the account provided in the Configuration step doesn't have appropriate rights to do so. To assign these roles, you will be asked to enter credentials of an admin user who is a member of the Organization Management role group. Please also check, if you didn't misspell the entered credentials.

O365 Migration troubleshooting admin cred2
Fig. 3.  Providing credentials of an account that is a member of
the Organization Management role group.

Provide a valid UPN and password and click OK. The missing roles will be assigned, and the Configuration step will finish successfully. 


Note that only the credentials specified in the Admin account step are used to connect to the source or target server. Credentials provided in the Configuration step are only used once to assign the missing roles. Therefore, you will not be asked to provide the credentials of other admin users again as long as you use the same admin account for the migration process.

If you don't want the program to assign any roles automatically, you can do it manually, following the steps described in this KB article.

Problem not solved?

If you can't find the solution to your problem, try searching our Knowledge Base.

If you still need help, contact our Customer Service. We know our products inside out.

In this article

Was this information useful?