In order to activate individual user backups, your Admin account must have Impersonation and be a member of the Management Group.
Note: If you use multi-factor authentication with Microsoft 365, you will need to use OAuth based authorization (requires a Global Admin account).
Follow the next steps to configure impersonation:
1. On your Microsoft 365 dashboard and click on the “Admin” menu.
2. Click on the “Exchange” menu item.
3. Click on Roles → Admin Roles
4. Select the Discovery Management role group.
5. Click on the Permissions section.
6. Add the ApplicationImpersonation Role to this role group and click Save.
7. Click on the Assigned section.
8. Add the admin that will be used for the backup to this role group.
9. Select the Organization Management role group.
10. Click on the Permissions section.
11. Add the ApplicationImpersonation Role to this role group and click Save.
12. Click on the Assigned section.
13. Add the admin that will be used for the backup to this role group.
- Please wait 5-10 minutes for the changes to be applied.