{"id":8902,"date":"2024-11-09T10:01:35","date_gmt":"2024-11-09T01:01:35","guid":{"rendered":"https:\/\/m365jp.net\/?p=8902"},"modified":"2024-11-09T10:15:33","modified_gmt":"2024-11-09T01:15:33","slug":"mc718754-updated-retirement-of-rbac-application-impersonation-in-exchange-online-3","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2024-11-09-mc718754-updated-retirement-of-rbac-application-impersonation-in-exchange-online-3","title":{"rendered":"MC718754 | (Updated) Retirement of RBAC Application Impersonation in Exchange Online"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC718754 | (Updated) Retirement of RBAC Application Impersonation in Exchange Online<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>planForChange<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>11\/09\/2024 00:27:28<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>02\/23\/2024 23:08:46<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>06\/30\/2025 07:00:00<\/td>\n<\/tr>\n<tr>\n<th>Action Required By Date<\/th>\n<td>2025-01-31T08:00:00Z<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p>Updated November 8, 2024: We are following up on our previous announcement regarding the retirement of the ApplicationImpersonation Role Based Access Control (RBAC) role in Exchange Online. As the February 2025 deprecation date is approaching, it is important   to follow the guidance in this Message Center post and take action now to ensure applications in your tenant are not using this feature. After this date, applications using this feature that are not updated will no longer work. For additional information,   please go to: <a href=\"https:\/\/techcommunity.microsoft.com\/blog\/exchange\/retirement-of-rbac-application-impersonation-in-exchange-online\/4062671\" target=\"_blank\" rel=\"noopener\">  https:\/\/aka.ms\/applicationimpersonationdeprecation<\/a>&nbsp;<\/p>\n<p>We are announcing the retirement of the ApplicationImpersonation Role Based Access Control (RBAC) role in Exchange Online.&nbsp;<\/p>\n<p>[When this will happen:]<\/p>\n<p>We will begin the retirement in September 2024 (previously May) and in February 2025 will remove this role and its feature set from Exchange Online.<\/p>\n<p>[How this will affect your organization:]<\/p>\n<p>You are receiving this message because this RBAC role is commonly used with Exchange Web Services (EWS) to enable one-to-many mailbox access. We are removing this feature and will begin blocking the assignment of the ApplicationImpersonation (RBAC) role   to accounts.<\/p>\n<p>This will require all apps to have an App Registration, use Application permissions (not Delegated), and use a secure credential for access. Despite this change, if your app is granted the  <i>full_access_as_app<\/i> Application permission, it will provide the same level of mailbox access as the ApplicationImpersonation RBAC role.<\/p>\n<p>[What you need to do to prepare:]<\/p>\n<p>Review your current configuration and make changes as appropriate to minimize disruption to your service.<\/p>\n<p>For more information, please see:<\/p>\n<ul>\n<li><a href=\"https:\/\/aka.ms\/ApplicationImpersonationDeprecation\" target=\"_blank\" rel=\"noopener\">Retirement of RBAC Application Impersonation in Exchange Online<\/a>.<\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/exchange\/client-developer\/exchange-web-services\/impersonation-and-ews-in-exchange\" target=\"_blank\" rel=\"noopener\">Impersonation and EWS in Exchange<\/a><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<p>2024 \u5e74 11 \u6708 8 \u65e5\u66f4\u65b0: Exchange Online \u306e ApplicationImpersonation \u30ed\u30fc\u30eb \u30d9\u30fc\u30b9\u306e\u30a2\u30af\u30bb\u30b9\u5236\u5fa1 (RBAC) \u30ed\u30fc\u30eb\u306e\u5ec3\u6b62\u306b\u95a2\u3059\u308b\u4ee5\u524d\u306e\u767a\u8868\u3092\u30d5\u30a9\u30ed\u30fc\u30a2\u30c3\u30d7\u3057\u3066\u3044\u307e\u3059\u30022025 \u5e74 2 \u6708\u306e\u975e\u63a8\u5968\u65e5\u304c\u8fd1\u3065\u3044\u3066\u3044\u308b\u305f\u3081\u3001\u3053\u306e\u30e1\u30c3\u30bb\u30fc\u30b8 \u30bb\u30f3\u30bf\u30fc\u306e\u6295\u7a3f\u306e\u30ac\u30a4\u30c0\u30f3\u30b9\u306b\u5f93\u3044\u3001\u30c6\u30ca\u30f3\u30c8\u5185\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304c\u3053\u306e\u6a5f\u80fd\u3092\u4f7f\u7528\u3057\u3066\u3044\u306a\u3044\u3053\u3068\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3088\u3046\u306b\u4eca\u3059\u3050\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u304c\u91cd\u8981\u3067\u3059\u3002\u3053\u306e\u65e5\u4ed8\u3092\u904e\u304e\u308b\u3068\u3001\u66f4\u65b0\u3055\u308c\u3066\u3044\u306a\u3044\u3053\u306e\u6a5f\u80fd\u3092\u4f7f\u7528\u3059\u308b\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306f\u52d5\u4f5c\u3057\u306a\u304f\u306a\u308a\u307e\u3059\u3002\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001  <a href=\"https:\/\/techcommunity.microsoft.com\/blog\/exchange\/retirement-of-rbac-application-impersonation-in-exchange-online\/4062671\" target=\"_blank\" rel=\"noopener\">  https:\/\/aka.ms\/applicationimpersonationdeprecation<\/a>&nbsp;\u3092\u3054\u89a7\u304f\u3060\u3055\u3044\u3002<\/p>\n<p>Exchange Online\u306e ApplicationImpersonation \u30ed\u30fc\u30eb \u30d9\u30fc\u30b9\u306e\u30a2\u30af\u30bb\u30b9\u5236\u5fa1 (RBAC) \u30ed\u30fc\u30eb\u306e\u5ec3\u6b62\u3092\u767a\u8868\u3057\u307e\u3059\u3002&nbsp;<\/p>\n<p>[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/p>\n<p>2024 \u5e74 9 \u6708 (\u4ee5\u524d\u306f 5 \u6708) \u306b\u5ec3\u6b62\u3092\u958b\u59cb\u3057\u30012025 \u5e74 2 \u6708\u306b\u3053\u306e\u30ed\u30fc\u30eb\u3068\u305d\u306e\u6a5f\u80fd\u30bb\u30c3\u30c8\u3092 Exchange Online \u304b\u3089\u524a\u9664\u3057\u307e\u3059\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3042\u306a\u305f\u306e\u7d44\u7e54\u306b\u3069\u306e\u3088\u3046\u306b\u5f71\u97ff\u3057\u307e\u3059\u304b:]<\/p>\n<p>\u3053\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u304c\u8868\u793a\u3055\u308c\u308b\u306e\u306f\u3001\u3053\u306e RBAC \u30ed\u30fc\u30eb\u304c Exchange Web \u30b5\u30fc\u30d3\u30b9 (EWS) \u3067\u4e00\u822c\u7684\u306b\u4f7f\u7528\u3055\u308c\u3001\u4e00\u5bfe\u591a\u306e\u30e1\u30fc\u30eb\u30dc\u30c3\u30af\u30b9 \u30a2\u30af\u30bb\u30b9\u3092\u6709\u52b9\u306b\u3059\u308b\u305f\u3081\u3067\u3059\u3002\u3053\u306e\u6a5f\u80fd\u306f\u524a\u9664\u3055\u308c\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u3078\u306e ApplicationImpersonation (RBAC) \u30ed\u30fc\u30eb\u306e\u5272\u308a\u5f53\u3066\u306e\u30d6\u30ed\u30c3\u30af\u304c\u958b\u59cb\u3055\u308c\u307e\u3059\u3002<\/p>\n<p>\u3053\u308c\u306b\u306f\u3001\u3059\u3079\u3066\u306e\u30a2\u30d7\u30ea\u306b\u30a2\u30d7\u30ea\u306e\u767b\u9332\u304c\u3042\u308a\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30a2\u30af\u30bb\u30b9\u8a31\u53ef (\u59d4\u4efb\u3055\u308c\u3066\u3044\u306a\u3044) \u3092\u4f7f\u7528\u3057\u3001\u30a2\u30af\u30bb\u30b9\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3067\u4fdd\u8b77\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u3092\u4f7f\u7528\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u306e\u5909\u66f4\u306b\u3082\u304b\u304b\u308f\u3089\u305a\u3001\u30a2\u30d7\u30ea\u306b  <i>full_access_as_app<\/i> Application \u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u304c\u4ed8\u4e0e\u3055\u308c\u3066\u3044\u308b\u5834\u5408\u306f\u3001ApplicationImpersonation RBAC \u30ed\u30fc\u30eb\u3068\u540c\u3058\u30ec\u30d9\u30eb\u306e\u30e1\u30fc\u30eb\u30dc\u30c3\u30af\u30b9 \u30a2\u30af\u30bb\u30b9\u304c\u63d0\u4f9b\u3055\u308c\u307e\u3059\u3002<\/p>\n<p>\u3010\u6e96\u5099\u306b\u5fc5\u8981\u306a\u3053\u3068\u3011<\/p>\n<p>\u73fe\u5728\u306e\u69cb\u6210\u3092\u898b\u76f4\u3057\u3001\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u5909\u66f4\u3092\u52a0\u3048\u3066\u3001\u30b5\u30fc\u30d3\u30b9\u306e\u4e2d\u65ad\u3092\u6700\u5c0f\u9650\u306b\u6291\u3048\u307e\u3059\u3002<\/p>\n<p>\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u4ee5\u4e0b\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<ul>\n<li><a href=\"https:\/\/aka.ms\/ApplicationImpersonationDeprecation\" target=\"_blank\" rel=\"noopener\">Exchange Online \u3067\u306e RBAC \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u507d\u88c5\u306e\u5ec3\u6b62<\/a>\u3002<\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/exchange\/client-developer\/exchange-web-services\/impersonation-and-ews-in-exchange\" target=\"_blank\" rel=\"noopener\">Exchange \u3067\u306e\u507d\u88c5\u3068 EWS<\/a><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC718754 | (Updated) Retirement of RBAC Application Impersonation in Exchange Online Classification planForCha [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-8902","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/8902","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=8902"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/8902\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=8902"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=8902"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=8902"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}