{"id":5241,"date":"2024-02-24T09:02:11","date_gmt":"2024-02-24T00:02:11","guid":{"rendered":"https:\/\/m365jp.net\/?p=5241"},"modified":"2024-02-24T09:03:14","modified_gmt":"2024-02-24T00:03:14","slug":"mc718754-retirement-of-rbac-application-impersonation-in-exchange-online","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2024-02-24-mc718754-retirement-of-rbac-application-impersonation-in-exchange-online","title":{"rendered":"MC718754 | Retirement of RBAC Application Impersonation in Exchange Online"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC718754 | Retirement of RBAC Application Impersonation in Exchange Online<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>planForChange<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>02\/23\/2024 23:09:11<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>02\/23\/2024 23:08:46<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>03\/31\/2025 07:00:00<\/td>\n<\/tr>\n<tr>\n<th>Action Required By Date<\/th>\n<td>2025-01-31T08:00:00Z<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p>We are announcing the retirement of the ApplicationImpersonation Role Based Access Control (RBAC) role in Exchange Online.&nbsp;<\/p>\n<p>[When this will happen:]<\/p>\n<p>We will begin the retirement in May 2024 and in February 2025 will remove this role and its feature set from Exchange Online.<\/p>\n<p>[How this will affect your organization:]<\/p>\n<p>You are receiving this message because this RBAC role is commonly used with Exchange Web Services (EWS) to enable one-to-many mailbox access. We are removing this feature and will begin blocking the assignment of the ApplicationImpersonation (RBAC) role   to accounts.<\/p>\n<p>This will require all apps to have an App Registration, use Application permissions (not Delegated), and use a secure credential for access. Despite this change, if your app is granted the  <i>full_access_as_app<\/i> Application permission, it will provide the same level of mailbox access as the ApplicationImpersonation RBAC role.<\/p>\n<p>[What you need to do to prepare:]<\/p>\n<p>Review your current configuration and make changes as appropriate to minimize disruption to your service.<\/p>\n<p>For more information, please see:<\/p>\n<ul>\n<li><a href=\"https:\/\/aka.ms\/ApplicationImpersonationDeprecation\" target=\"_blank\" rel=\"noopener\">Retirement of RBAC Application Impersonation in Exchange Online<\/a>.<\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/exchange\/client-developer\/exchange-web-services\/impersonation-and-ews-in-exchange\" target=\"_blank\" rel=\"noopener\">Impersonation and EWS in Exchange<\/a><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<p>Exchange Online\u306e ApplicationImpersonation \u5f79\u5272\u30d9\u30fc\u30b9\u306e\u30a2\u30af\u30bb\u30b9\u5236\u5fa1 (RBAC) \u306e\u5f79\u5272\u306e\u5ec3\u6b62\u3092\u767a\u8868\u3057\u307e\u3059\u3002&nbsp;<\/p>\n<p>[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/p>\n<p>2024 \u5e74 5 \u6708\u306b\u5ec3\u6b62\u3092\u958b\u59cb\u3057\u30012025 \u5e74 2 \u6708\u306b\u3053\u306e\u30ed\u30fc\u30eb\u3068\u305d\u306e\u6a5f\u80fd\u30bb\u30c3\u30c8\u3092Exchange Online\u304b\u3089\u524a\u9664\u3057\u307e\u3059\u3002<\/p>\n<p>[\u3053\u308c\u304c\u7d44\u7e54\u306b\u53ca\u307c\u3059\u5f71\u97ff:]<\/p>\n<p>\u3053\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u304c\u8868\u793a\u3055\u308c\u308b\u306e\u306f\u3001\u3053\u306e RBAC \u306e\u5f79\u5272\u304c Exchange Web \u30b5\u30fc\u30d3\u30b9 (EWS) \u3067\u4e00\u822c\u7684\u306b\u4f7f\u7528\u3055\u308c\u3001\u4e00\u5bfe\u591a\u306e\u30e1\u30fc\u30eb\u30dc\u30c3\u30af\u30b9 \u30a2\u30af\u30bb\u30b9\u3092\u53ef\u80fd\u306b\u3059\u308b\u305f\u3081\u3067\u3059\u3002\u3053\u306e\u6a5f\u80fd\u3092\u524a\u9664\u3057\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u3078\u306e ApplicationImpersonation (RBAC) \u30ed\u30fc\u30eb\u306e\u5272\u308a\u5f53\u3066\u306e\u30d6\u30ed\u30c3\u30af\u3092\u958b\u59cb\u3057\u307e\u3059\u3002<\/p>\n<p>\u3053\u308c\u306b\u306f\u3001\u3059\u3079\u3066\u306e\u30a2\u30d7\u30ea\u304c\u30a2\u30d7\u30ea\u767b\u9332\u3092\u6301\u3061\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30a2\u30af\u30bb\u30b9\u8a31\u53ef (\u59d4\u4efb\u3055\u308c\u3066\u3044\u306a\u3044) \u3092\u4f7f\u7528\u3057\u3001\u30a2\u30af\u30bb\u30b9\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3067\u4fdd\u8b77\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u3092\u4f7f\u7528\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u306e\u5909\u66f4\u306b\u3082\u304b\u304b\u308f\u3089\u305a\u3001\u30a2\u30d7\u30ea\u306b  <i>full_access_as_app<\/i> \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u304c\u4ed8\u4e0e\u3055\u308c\u3066\u3044\u308b\u5834\u5408\u306f\u3001ApplicationImpersonation RBAC \u30ed\u30fc\u30eb\u3068\u540c\u3058\u30ec\u30d9\u30eb\u306e\u30e1\u30fc\u30eb\u30dc\u30c3\u30af\u30b9 \u30a2\u30af\u30bb\u30b9\u304c\u63d0\u4f9b\u3055\u308c\u307e\u3059\u3002<\/p>\n<p>[\u6e96\u5099\u306b\u5fc5\u8981\u306a\u3053\u3068:]<\/p>\n<p>\u73fe\u5728\u306e\u69cb\u6210\u3092\u78ba\u8a8d\u3057\u3001\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u5909\u66f4\u3057\u3066\u3001\u30b5\u30fc\u30d3\u30b9\u306e\u4e2d\u65ad\u3092\u6700\u5c0f\u9650\u306b\u6291\u3048\u307e\u3059\u3002<\/p>\n<p>\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u4ee5\u4e0b\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<ul>\n<li><a href=\"https:\/\/aka.ms\/ApplicationImpersonationDeprecation\" target=\"_blank\" rel=\"noopener\">Exchange Online\u3067\u306e RBAC \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u507d\u88c5\u306e\u5ec3\u6b62<\/a>\u3002<\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/exchange\/client-developer\/exchange-web-services\/impersonation-and-ews-in-exchange\" target=\"_blank\" rel=\"noopener\">\u507d\u88c5\u3068 EWS in Exchange<\/a><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC718754 | Retirement of RBAC Application Impersonation in Exchange Online Classification planForChange Last U [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-5241","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/5241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=5241"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/5241\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=5241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=5241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=5241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}