how to check ms-Exch-EPI-Token-Serialization permission on exchange online

%3CLINGO-SUB%20id%3D%22lingo-sub-1271238%22%20slang%3D%22en-US%22%3Ehow%20to%20check%20ms-Exch-EPI-Token-Serialization%20permission%20on%20exchange%20online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1271238%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20an%20application%20internally%20that%20runs%20as%20a%20service%20account%20(which%20connects%20to%20exchange%20online%20via%20EWS)%20that%20sends%20emails%20on%20behalf%20of%20the%20user%20logged%20in.%20About%2010%20days%20ago%20it%20stopped%20working%2C%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20can%20log%20into%20OWA%20or%20outlook%20with%20the%20service%20account%20and%20send%20from%20other%20accounts%20so%20I%20know%20the%20permissions%20are%20still%20valid.%3C%2FP%3E%3CP%3EThe%20application%20support%20asked%20us%20to%20check%20if%20the%20service%20account%20had%20the%20rights%20for%26nbsp%3B%3C%2FP%3E%3CDIV%3Ems-Exch-EPI-Token-Serialization%20because%20they%20were%20seeing%20the%20error%20in%20their%20logs%20about%20the%20user%20not%20having%20the%20rights%20to%20serialize%20tokens.%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3EI%20can%20only%20find%20powershell%20commands%20for%20on%20prem%20exchange%2C%20nothing%20for%20exchange%20online.%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3Ethanks%2Cjb%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1271238%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1536121%22%20slang%3D%22de-DE%22%3ESubject%3A%20how%20to%20check%20ms-Exch-EPI-Token-Serialization%20permission%20on%20exchange%20online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1536121%22%20slang%3D%22de-DE%22%3E%3CP%3ESame%20problem%20here.%20Any%20solutions%3F%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F461012%22%20target%3D%22_blank%22%3E%40Jason_Benway%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

We have an application internally that runs as a service account (which connects to exchange online via EWS) that sends emails on behalf of the user logged in. About 10 days ago it stopped working, 

We can log into OWA or outlook with the service account and send from other accounts so I know the permissions are still valid.

The application support asked us to check if the service account had the rights for 

ms-Exch-EPI-Token-Serialization because they were seeing the error in their logs about the user not having the rights to serialize tokens.
 
I can only find powershell commands for on prem exchange, nothing for exchange online.
 
thanks,jb
1 Reply