|

How to Enable Impersonation in Microsoft 365 or Exchange Server On-Premises (2024 version)

ByVitalii Herasymiv

Impersonation is a way of granting a single Microsoft 365 (formerly Office 365) or Exchange on-premises account domain-wide access to perform actions on behalf of other users. This is extremely useful when developing an organization-level calendar, contact or task integration within a tenant or between two tenants.

SyncPenguin uses impersonation for domain-wide access in its two-way, one-way, one-to-many and many-to-one syncs. For example, you can sync user calendars between two tenants, or push public folder contacts to all users in the organization. In this article, we explain how to grant user impersonation permission on both Office 365 and Exchange on-premises.

Microsoft 365 (Office 365)

Microsoft is deprecating impersonation in cloud Microsoft 365. Read more information here and here.

Currently, the best place to configure impersonation in MS 365 is through the Exchange admin center, which can be directly accessed using this link: https://admin.exchange.microsoft.com/. Note that it’s different from the regular M365 admin center. Please ensure you are signed in as an admin user.

Exchange admin center

Once there, head to the Roles -> Admin roles section and click Add role group.

Admin roles

Next, enter the new role name (e.g. Impersonation) and click Next.

Enter the role name

Then search for the ApplicationImpersonation permission, select it, and click Next.

Add ApplicationImpersonation

Then you need to select the user or user group that will be given the impersonation permission, and click Next.

Select the user

Lastly, you need to confirm your choices and click Add role group.

Confirm the role settings

If successful, the following confirmation is shown. Click Done to return to the roles page.

The admin role is successfully added

Please note that the role assignment usually takes up to an hour to take effect. If the impersonation is not working right away, please wait a bit and try again later.

Exchange on-premises

If you have access to the Exchange admin center, you can configure the impersonation in the same way as above. Otherwise, it can be done using a PowerShell command.

In the Exchange management shell, run the following command:

New-ManagementRoleAssignment -Name:ROLE_NAME -Role:ApplicationImpersonation -User:ACCOUNT_NAME

As with Office 365, please note that the change usually takes up to an hour to take effect.

Looking for an O365 or Exchange sync or integration?

Maybe we can help. Check out the list of our supported syncs, and feel free to contact us for any questions.

Similar Posts

How to sync room calendars between Microsoft 365 tenants?
|

How to sync room calendars between Microsoft 365 tenants?

ByVitalii Herasymiv

Imagine a scenario where your company shares an office meeting room with another organization, and both of you utilize Microsoft Office 365 as your preferred office suite. However, you encounter a challenge: meetings cannot be directly shared between the two tenants. In such a situation, how can you effectively manage the room’s calendar? Fortunately, SyncPenguin…

On syncing calendar meetings between Microsoft 365 and Google Workspace
| |

On syncing calendar meetings between Microsoft 365 and Google Workspace

ByVitalii Herasymiv

Microsoft 365, formerly known as Office 365, and Google Workspace are widely recognized office suites catering to businesses of all sizes. While each has its own advantages and disadvantages, this article aims to address a specific scenario where organizations or specific teams may need to utilize both solutions simultaneously. Managing emails from multiple mailboxes is…

Syncing Office 365 Contacts From a Public Folder to User Folders (One-to-Many Sync)
| |

Syncing Office 365 Contacts From a Public Folder to User Folders (One-to-Many Sync)

ByVitalii Herasymiv

In this article, we’ll explain how you can easily use SyncPenguin to establish an automatic, one-way sync of contacts from a single Office 365 source folder (public or shared) to multiple destination users. Please note that the same instructions apply when syncing Office 365, Exchange on-premises or a combination of those. Create a one-to-many sync…

Syncing Microsoft 365 GAL to individual user mailboxes and mobile devices
| |

Syncing Microsoft 365 GAL to individual user mailboxes and mobile devices

ByVitalii Herasymiv

Maintaining seamless access to all contacts is crucial for efficient email communication and productivity on mobile devices. However, organizations that rely on Microsoft Office 365 as their office suite often face the inconvenience of not being able to access their organization contacts on their mobile devices, even with Outlook contacts integrated into iPhone or Android….

How to enable delegate access to an Office 365 or Exchange room or resource calendar?
| |

How to enable delegate access to an Office 365 or Exchange room or resource calendar?

ByVitalii Herasymiv

In this article, we’ll go over the steps necessary to enable full delegate access to an Office 365 or Exchange room or resource calendar. SyncPenguin uses this permission to connect a room or resource calendar through a dedicated user or service account in order to two-way sync room calendars between or within tenants. Office 365…

Office 365 Calendar Meeting Sync Between Organizations or Tenants
| |

Office 365 Calendar Meeting Sync Between Organizations or Tenants

ByVitalii Herasymiv

Managing meeting bookings and ensuring there are no scheduling conflicts can be a daunting task when employees in your organization have active work accounts across different Office 365 tenants. To address this challenge and simplify calendar management, SyncPenguin offers a reliable and efficient solution — a two-way synchronization that keeps calendars up-to-date with a seamless…