Exchange requirements

Before you set up your migration from Microsoft Exchange, make sure you meet the following requirements.

Before you begin

Make sure you:

Meet the Google Workspace Migrate requirements.
Complete the steps to Install & set up Google Workspace Migrate.

Exchange versions and setup

Supported versions—Exchange 2010, 2010 SP1, 2010 SP2, 2010 SP3, 2013, 2013 SP1, 2016, 2019 or Exchange Online (Microsoft 365).
Unsupported version—Exchange 2007.
Exchange Web Services (EWS)—EWS must be enabled and reachable by the machine that runs the Google Workspace Migrate software.
Transport Layer Security—TLS 1.2 or later must be configured on the Exchange connection.
OAuth scopes—If you are migrating from Exchange Online, Google Workspace Migrate asks you to authorize the following scopes for access to Exchange:
- EWS.AccessAsUser.All—Allows Google Workspace Migrate to act as the authenticated account through the EWS API.
- Offline_access—Allows Google Workspace Migrate to obtain a refresh token that remains valid until it’s manually revoked.

Exchange admin requirements

The Exchange administrator account must have a mailbox in the Exchange environment and these roles:

ApplicationImpersonation
View-Only Configuration
View-Only Recipients
Mailbox Search (not required for Exchange 2010)
MailboxSearchApplication (not required for Exchange 2010)

It can take several hours for an admin role to take effect. If you're seeing an RBAC-related error after applying the roles, wait a few hours and try again.

Additional requirements for Exchange Online

URLs

Make sure the Google Workspace Migrate platform and nodes can access the following URLs:

https://login.microsoftonline.com/organizations/oauth2/v2.0/devicecode
https://microsoft.com/devicelogin
https://login.microsoftonline.com/common/oauth2/deviceauth
https://login.microsoftonline.com/common/login
https://login.microsoftonline.com/appverify
https://login.microsoftonline.com/organizations/oauth2/v2.0/token
https://outlook.office365.com/EWS/Exchange.asmx

Admin requirements

Make sure the application administrator that is used to grant administrator consent to Google Workspace Migrate can impersonate itself. You might need to explicitly set this up if you're using a delegated admin or Exchange management role scopes.

Additionally, you must also meet one of these requirements:

Your Exchange administrator has the Application Administrator role in Microsoft Azure Active Directory.
An Application Administrator has granted administrator consent to the Google Workspace Migrate application for your organization. (To do so, sign in to Microsoft Online here.)

Supported & unsupported features for Exchange

_{Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.}