Microsoft announced the Role Based Access Control for Applications in Exchange Online deprecation in late February 2024, which they will start phasing out in May 2024. This is the role assignment recommendation for MigrationWiz customers to utilize involving O365 endpoints for the mailbox/archive migrations.
For more information please review this Microsoft article.
BitTitan’s Plan for Retirement of Microsoft RBAC Impersonation
The process of delivering a solution will be enacted in a two-phase approach
-
Phase 1
We have released documentation on how to use PowerShell scripts to enable new APIs for authentication. With the deprecation of RBAC Impersonation for EWS, MigrationWiz will depend on these new APIs moving forward. This will eliminate the historical requirement of using Global Admin accounts with RBAC Impersonation. Please follow the steps outlined in the MigrationWiz KB article.
For more information regarding the new PowerShell scripts please review this Microsoft article.
-
Phase 2
Building on the initial phase, the subsequent step involves integrating this automation into MigrationWiz, thereby eliminating the manual PowerShell requirements.
What do I need to do if I have an upcoming Mailbox migration?
If you have upcoming mailbox/archive migrations planned, we strongly recommend you grant the necessary Admin Impersonation before the end of April 2024.
Please follow the steps outlined in the MigrationWiz KB article.
In addition, please take a moment to review the demo video below.
Please note that a critical area where this has an immediate impact is on new projects. For all ongoing projects where you already use an Admin Account with Impersonation privileges, there will be no interruptions. Microsoft has confirmed that these Admin Accounts will retain Impersonation capabilities until February 2025.
Should you have any questions or require further assistance, please do not hesitate to reach out to our dedicated support team. Open a Ticket.