Required user rights

To access mailboxes, Agent for Exchange needs an account with the appropriate rights. You are prompted to specify this account when configuring various operations with mailboxes.

Membership of the account in the Organization Management role group enables access to any mailbox, including mailboxes that will be created in the future.

The minimum required user rights are as follows:

• The account must be a member of the Server Management and Recipient Management role groups.
• The account must have the ApplicationImpersonation management role enabled for all users or groups of users whose mailboxes the agent will access.

  For information about configuring the ApplicationImpersonation management role, refer to the following Microsoft knowledge base article: https://msdn.microsoft.com/en-us/library/office/dn722376.aspx.