Symptoms

The error pops-up when attempting to add an Office 365 domain in DS-NOC > DS-Client tab > Cloud Management System > Add Domain.

Cause

 Application Impersonation role was not assigned in Organization Management

Workaround

Add Application Impersonation as an assigned role in Organization Management
a) Go to the administrative settings for Exchange:
o For Exchange Online: In the Microsoft Office 365 account, on the ADMIN menu, select Exchange.
o For Exchange Online in a Microsoft Office 365 Small Business domain, visit https://outlook.office365.com/ecp/
b) Go to permissions > admin roles.
c) In the list, select Organization Management and click the Edit button.
d) In the pop-up window, under Role, click +.
e) In a new pop-up window, select ApplicationImpersonation, click add, and click OK.
f) In the first pop-up window, click Save.
g) In the admin roles pane, verify that ApplicationImpersonation is listed under Assigned Roles of the Organization Management group.

In addition to the requirement above, ensure that the other two user permission requirements for Exchange are met:
1. Add the user to Discovery Management
a) Go to the administrative settings for Exchange:
o For Exchange Online: In the Microsoft Office 365 account, on the ADMIN menu, select Exchange.
o For Exchange Online in a Microsoft Office 365 Small Business domain, visit https://outlook.office365.com/ecp/
b) Go to permissions > admin roles.
c) In the list, select Discovery Management and click the Edit button.
d) In the pop-up window, under Members, click +.
e) In a new pop-up window, select the user you need to add, click add, and click OK.
f) In the first pop-up window, click Save.
g) In the admin roles pane, verify that the user you need to add is listed under Members of the Discovery Management group.

2. Add user to Organization Management
a) Go to the administrative settings for Exchange:
o For Exchange Online: In the Microsoft Office 365 account, on the ADMIN menu, select Exchange.
o For Exchange Online in a Microsoft Office 365 Small Business domain, visit: https://outlook.office365.com/ecp/
b) Go to permissions > admin roles.
c) In the list, select Organization Management and click the Edit button.
d) In the pop-up window, under Members, click +.
e) In a new pop-up window, select the user you need to add, click add, and click OK.
f) In the first pop-up window, click Save.
g) In the admin roles pane, verify that the user you need to add is listed under Members of the Organization Management group.