Email Migration

Fix Exchange Impersonation Error During Microsoft 365 Email Migration

Muhammad Talha Oct 19, 2026 869 views

Question details

The user is attempting to migrate emails from Microsoft 365 to another platform, such as Google Workspace, but the process is being blocked by an Exchange Impersonation error.

Fix Exchange Impersonation Error During Microsoft 365 Email Migration

Product: Microsoft 365
Device & OS: not provided
Scenario: Migrating email accounts from Microsoft 365 to Google Workspace or another email service provider.
Observed behavior: The migration fails due to missing ApplicationImpersonation permissions, restricted role assignments, or administrative limitations in third-party managed accounts like GoDaddy.

Before you start

Ensure you have global administrator access to your Microsoft 365 admin center before attempting to modify management roles and permissions.

Solution 1Recommended

Assign the ApplicationImpersonation Role in Exchange Admin Center

Use this solution if you have full administrative access to your Microsoft 365 tenant and can manually assign the necessary impersonation roles to your migration account.

The migration service requires the ApplicationImpersonation role to access user mailboxes and securely copy data. By default, this role is not assigned to the administrator account.

Access the Exchange Admin Center

Log in to the Microsoft 365 admin center, navigate to the left-hand menu, and select 'Exchange' under the Admin centers section.

Navigate to Admin Roles

In the Exchange admin center dashboard, go to 'Roles' and click on 'Admin Roles'.

Create a New Role Group

Click 'Add role group', name it 'MigrationImpersonation', and proceed to the next step. Under the 'Permissions' section, search for and select 'ApplicationImpersonation'.

Assign to the Migration Admin

In the 'Admins' section, add the administrator account you are using for the migration. Review the settings and click 'Add role group' to apply the changes.

Assign the ApplicationImpersonation Role in Exchange Admin Center

Propagation Delay: It may take up to 24 hours for the new role assignment to fully propagate across the Microsoft 365 servers. If the migration still fails, wait a few hours and try again.

Solution 2

Contact Microsoft Support for Restricted Accounts

Use this method if you lack a delegating role to modify permissions, or if your Microsoft 365 account is managed by a third-party reseller like GoDaddy.

Free Microsoft Office alternative

Looking for a Hassle-Free Office Suite After Migration?

If you are migrating away from Microsoft 365 to avoid complex administration limitations and high subscription costs, consider switching to WPS Office. It provides a lightweight, intuitive experience for all your document needs without the hassle.

1. Download the Installer: Visit the official WPS Office website and download the free installer tailored for your operating system.
2. Install WPS Office: Run the downloaded file and follow the straightforward on-screen instructions to set up the productivity suite on your device.
3. Open Your Existing Files: Launch WPS Office and directly open your previous Microsoft documents. You can continue editing without worrying about format disruptions.

100% compatible with Microsoft Office formats like Word (.docx), Excel (.xlsx), and PowerPoint (.pptx)Simplifies your daily document workflow after migrating away from complex Microsoft 365 environmentsFree to use with a familiar, user-friendly interface that requires zero learning curveLightweight installation supporting cross-platform usage on Windows, Mac, Linux, iOS, and Android

microsoft office alternative - wps office

Frequently Asked Questions

What is the ApplicationImpersonation role in Exchange Online?

The ApplicationImpersonation role allows an application, such as an email migration tool, to impersonate users within an organization. This grants the tool the necessary permissions to access mailboxes and securely copy data during a migration process.

Why can't I assign the impersonation role on my GoDaddy-managed account?

Third-party resellers like GoDaddy often provide a syndicated or heavily managed version of Microsoft 365. This setup restricts users from accessing advanced Exchange admin centers or modifying complex administrative roles directly. You will need to contact their support team to adjust these settings on your behalf.

Can I perform a Google Workspace migration without the ApplicationImpersonation role?

No. The Google Workspace data migration service strictly requires the ApplicationImpersonation role to be active on your Microsoft 365 admin account. Without it, the service cannot authenticate properly to read and extract the emails from the source mailboxes.

How long does it take for role assignments to take effect in Microsoft 365?

While the assignment may appear immediately in the Exchange Admin Center, it can take anywhere from a few minutes up to 24 hours for the new permission privileges to fully propagate across Microsoft's backend servers.

Migration & Recovery