Retirement of RBAC Application Impersonation in Exchange Online

hi _cparker,

This is the steps we setup Email Service Account in Exchange.

1. Sign in to your Office365 Administrator account athttps://admin.microsoft.com/.
2. Click the App Launcher icon at the top left and then click Admin.
3. Click Users from the left-hand sidebar.
   • Click Active Users from the sub-menu.
   • Click Add Users.
4. Create a user with the following details:
   
   • First Name: UserFirstName
   • Last Name: Service-Account
   • Username: company-service-account
   • Password Settings: Let me create the password (Generate a strong password and make note of it.)
   • Uncheck Require this user to change their password when they first sign in.
   • Click Next to continue.
   • Select the Assign user a product license option and click Next to continue.
   • Accept the default values on the Optional settings page and click Next to continue.
   • Review the assigned settings and click Finish Adding to create the service account user.
     
5. Assign the Exchange permissions to your service account.
   
   • Expand the Admin Center menu and click Exchange.
   • In the new Exchange admin center dashboard window that opens, click permissions from the left-hand side menu.
     
6. Click the + sign to add a New Role Group.
   
   • Name: User Impersonate
   • Description: Allow this user to impersonate other user's mailboxes for service account.
   • Write Scope: Default
   • Role: Click the + sign and add ApplicationImpersonation.
   • Members: Click the + sign and add the company-service-account user
   • Click Save.

I am quite new to Exchange server. Seems from the step6 we use accounts with the ApplicationImpersonation role assignment, so what we need to change is just create a new RBAC role and assign to the Role Group, is that correct? BTW, we just use ExchangeService in ews-java-api-2.0.jar to fetch items and folders, thanks.