Access Rights Needed On-Prem Exchange 2010 Migrate Mailboxes to Exchange Online

IT_Admin XXXX used Ask the Experts™
Hello experts,
we are in the process of moving on-prem mailboxes (Exchange 2016) to Exchange Online, what rights are needed on-prem and on the tenant?

Just wanted to make a correct decision what access rights we need to provide the consultant service provider we are working with.
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
systechSenior Technical Lead


You need Office 365 admin console access, you might have received the admin account when you register the tenency.
Domain administrator account which has exchange admin group permissions.
MichelangeloSystem Administrator / Postmaster

O365: global admin.
On prem: It depends on the setup and the migration path. Exchange Full admin and Domain Admin on the domain you need to move mailbox from are minimum requirements. Supposing you will do a cutover migration, you may be able to skip domain admin. You woul dneed, for instance, to create a user and ginve him direct permissions on Exchange databases. That user will be the one associated to the migration endpoint.
In case you're going to go the hybrid way, you will have to setup an AADConnect server and sync one or more domain. You may need to grant Enterprise Admin privileges depending on what you have to sync to O365.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial