Update: please see our updated blog post on this subject.
Today we are announcing that we will begin blocking the assignment of the ApplicationImpersonation role in Exchange Online to accounts star...
Hello.. Based on the post I run the PS cmdlet to see the assignments of ApplicationImpersonation role (Get-ManagementRoleAssignment -Role ApplicationImpersonation | select-object "RoleAssigneeName","RoleAssigneeType")
But when I check the Organization Management role group in Exchange Admin site, the ApplicationImpersonation is not checked.. So i am wondering if it is or it isn't assigned to Organization Management.. (Our application has assigned full_access_as_app permission and on top of that is assigned to build in Entra role Exchange Administrator what is equivalent of Exchange Service Administrator group from Exchange which is assigned to Organization Management group.. So with this setup and if the output of PS cmdlet is correct it has assigned the ApplicaitonImpersonation role..
But still with sunset of ApplicationImpersonation it is enough that we have assigned full_access_as_app in order to do the impersonation further right?