Fix Unable to Add ApplicationImpersonation Permission in Exchange Online
Question details
The user is unable to add the ApplicationImpersonation permission to the Discovery Management role during an email migration.
- Product
- Exchange Online
- Device & OS
- not provided
- Scenario
- Migrating a mailbox from Exchange Online (purchased through GoDaddy) to Gmail.
- Observed behavior
- The migration fails with impersonation error 11021. Attempting to add the ApplicationImpersonation permission yields a "We couldn't save your changes. Please try again." error message.
Ensure you are logged in with Global Administrator credentials for both your Microsoft 365 and GoDaddy accounts before modifying role permissions.
Wait for Exchange System Stability and Retry
Microsoft Exchange Admin Center occasionally experiences temporary service instability that prevents saving role changes.
Many users report that permission-saving errors in the Exchange Admin Center are often caused by temporary backend synchronization issues. Waiting a few hours and retrying the exact same process frequently resolves the problem.
Sign completely out of the Exchange Admin Center and clear your browser cache.
Wait a few hours or overnight, then sign back in using your administrator credentials.
Navigate to Roles > Admin roles, select Discovery Management, and try adding the ApplicationImpersonation permission again.
Verify Administrator Privileges and Assignment Scope
Ensure the account attempting the modification has sufficient rights to alter role groups.
Contact GoDaddy Support for Delegated Restrictions
If your Microsoft 365 subscription is managed by GoDaddy, delegated administration settings may restrict certain native Exchange features.
Try WPS Office for Your Document Needs
While resolving your Exchange Online and GoDaddy migration errors, consider switching to WPS Office as a lightweight and free alternative to Microsoft Office. It delivers powerful tools for your documents without the need for expensive subscriptions.
- 1. Download WPS Office: Visit the official WPS website and download the free installer for your operating system.
- 2. Install the application: Run the setup file and follow the on-screen prompts to complete the installation.
- 3. Open your files: Launch WPS Office and seamlessly open any existing Word, Excel, or PowerPoint files.
Frequently Asked Questions
What is the ApplicationImpersonation role used for in Exchange Online?
The ApplicationImpersonation role allows a service account or migration application to act on behalf of the mailbox owner. This is essential for tasks like migrating emails to Gmail, as it lets the tool access multiple mailboxes without needing each individual user's password.
Why does GoDaddy restrict Exchange Admin Center features?
GoDaddy provides a simplified, unified management dashboard designed to make Microsoft 365 easier for small businesses to manage. However, this delegated administration model often restricts advanced configurations in the native Microsoft Exchange Admin Center to prevent accidental misconfigurations.
What causes migration error 11021 during an Exchange to Gmail migration?
Error 11021 generally occurs when the migration endpoint or service account lacks the necessary permissions, specifically the ApplicationImpersonation role, to successfully open and read the source user's mailbox data.
