GSuite Exchange Impersonation error

Issue

Migrating from O365 or other to GSuite you get an impersonation error as follows:

Failed
Exchange Impersonation error. Unable to open user mailbox due to impersonation error. Please make sure impersonation is set properly. (11021)https://ssl.gstatic.com/apps/cpanel/resources/img/tooltip.svg
Successfully migrated 0 emails
0 emails failed to be migrated

Error 11021
Impersonation for the mailbox is not allowed.
The administrator account provided does not have the ms-Exch-EPI-May-Impersonate permission on the user or contact that it is trying to impersonate, or on the mailbox database that contains the user mailbox. Correct the impersonation settings and see the EWS environment (Exchange 2007 and later) troubleshooting section for more information.

Resolution

    Log into to ECP e.g. https://outlook.office365.com/ecp
    Select the Permissions menu, then Admin Roles
    Create a new role by clicking on the + sign
    Give it a name e.g. GSuiteMigration
    Click on the + under roles and add the following
    ApplicationImpersonation
    ViewOnly-Configuration
    Click the + sign under members and add the admin that requires the impersonation role
    Save and rerun the migration steps

Tested Platform
O365
Gsuite

Hits: 1994

Leave a Reply