Description of error code "ErrorImpersonateUserDenied"

Domain: Exchange

Code: ErrorImpersonateUserDenied

Type: Configuration error (You are often able to resolve this type of error.)

Description: Impersonation of user denied. The integrating Exchange user does not have permission to impersonate the requested resource.

Possible solution: Application impersonation might not be allowed for the integrating Exchange user. Perhaps, a recipient filter that excludes the requested resource might be configured for the application impersonation role.

If the error happens when integrating a service account, please make sure that the service account itself is within the impersonation scope since the validation of the service account is done by impersonating the service account itself.

If the error happens in AskCody Add-ins please try to test if the service account is within the application impersonation scope by going to Integrations in Admin Center. Here, press edit on the Microsoft Exchange Integration, then updating it without doing changes to the setup. If the update is successful, then the impersonation error is for the specific user opening the Add-in. Check if that user mailbox is within the impersonation scope of the service account.

If you are using multiple domains to control multiple integrations, please make sure that the denied mailbox's domain is added and attached to the correct integration. If it is not attached to the correct domain AskCody will choose the default integration, being the first one added.