Admin User Configuration

Bacula Enterprise Exchange EWS Plugin needs an administrator user to access to the server and to retrieve the information to back up.

This admin user needs to be able to: - Impersonate other users with Full rights (and therefore access their mailboxes) - Have mailbox discovery abilities.

To configure impersonation, it is necessary to run the following command in Powershell:

Impersonation

New-ManagementRoleAssignment -name:impersonationAssignmentName -Role:ApplicationImpersonation -User:<AdminUserName>

For more information about impersonation, visit: https://learn.microsoft.com/en-us/exchange/client-developer/exchange-web-services/how-to-configure-impersonation

In order to provide full permissions to the admin user for the impersonated mailboxes, this command needs to be run in Powershell for every user:

Mailbox permissions

Add-MailboxPermission -Identity <user-to-impersonate@mydomain.com> -User <admin-user@mydomain.com>   -AccessRights fullaccess

Mailbox discover capabilities are enabled with the following command in Powershell:

Discovery Management

Add-RoleGroupMember -Identity "Discovery Management" -Member <AdminUserName>

Note

Be aware that the effect of all these commands can take time. Especially the Mailbox discovery capabilities may need more than 30 minutes to be activated.

Important

In addition to running this command, the Admin user needs to have his mailbox activated. Otherwise, discovery capabilities won’t work.