Troubleshooting View-Only Configuration role assignment

When configuring the connection to source and target servers, the connection wizard checks if the provided admin account is assigned the View-Only Configuration role. If the role is missing, the Configuration step fails (Fig. 1.), as the program is not able to check whether all the necessary management roles are assigned to this account, and you get the following error:

Failed to check if role 'View-Only Configuration' is assigned to admin account

O365 Migration troubleshooting view-only conf fail
Fig. 1. Failed to check the roles assigned to the admin account.

To continue with the configuration, you will be asked to provide the credentials of another account that has the View-Only Configuration role assigned (Fig. 2.). If you're not sure which users are assigned this role, you can check that manually, following this KB article. By default, an admin user who belongs to the Organization Management role group (or is a Global administrator) should have this role assigned. Keep in mind that this account will not be used to connect to the source or target server.

O365 Migration troubleshooting providing admin crd
Fig. 2. Providing admin account credentials with
the View-Only Configuration role assigned.

When you provide the correct credentials, the program will check if the admin account used for the migration is missing any other roles required for the migration process. If so, the program will attempt to assign them automatically (Fig. 3.). Click Yes to proceed.

O365 Migration troubleshooting assigning roles
Fig. 3. Automatically assigning the missing management roles.

Info

Some of the management roles are optional if certain are met. Learn more here.

If the program is unable to assign the missing roles, it means that the account provided in the Configuration step doesn't have appropriate rights to do so. To assign these roles, you will be asked to enter credentials of an admin user who is assigned the Global administrator role (Fig. 4.) or, if you're connecting to the source Exchange server, who is a member of the Organization Management role group. Please also check, if you didn't misspell the entered credentials.

O365 Migration troubleshooting admin cred2
Fig. 4.  Providing credentials of an account that is assigned
the Global administrator role.

Important

If you intend to provide the credentials of a Global administrator account that has the multi-factor authentication enabled, make sure to enter the app password instead of the regular Office 365 password. Otherwise, the program will not be able to use this account to assign the missing roles. Learn more.

Provide a valid UPN and password and click OK. The missing roles will be assigned, and the Configuration step will finish successfully.

Important

Note that only the credentials specified in the Admin account step are used to connect to the source or target server. Credentials provided in the Configuration step are only used once to assign the missing roles. Therefore, you will not be asked to provide the credentials of other admin users again as long as you use the same admin account for the migration process.

If you don't want the program to assign any roles automatically, you can do it manually, following the steps described in this KB article.

Was this information useful?