Setting Permissions for a Live @ Edu Migration

OKAY, you are serious about getting out of Oracle Calendar and into the Exchange Cloud. So you need to know how to set up your permissions on your Live @ EDU Admin account so that the migration application has access to all accounts to do what it needs.

 

You only need to do this once and you can remove these (rather generous but necessary) permissions after you have verified the integrity of your data and removed the Keyword.

 

1. Setup live@edu:
   
   1. Your domain must be Org-owned (you'll be setting RBACs….)
      
   2. Create a service account, e.g. deleg8@livetest.YOURDOMAIN.com
      
2. On your PC, connect your local instance of Windows PowerShell to Outlook Live
   
   1. Prerequisites:
      
      1. You'll need Windows PowerShell 2.0.
         
         1. Get it here: http://support.microsoft.com/kb/968929
            
         2. If you have windows XP x86 must upgrade to SP3+; 
            
         3. If you have windows XP x64 use the windows server 2003 x64 version
            
      2. Launch PowerShell: Start > All Programs > Accessories > Windows PowerShell > Windows PowerShell right-hand click and "Run-As administrator"
         
   2. Set the credentials for your Windows Live ID and Password for your Outlook Live account, then define a session
      
      1. $LiveCred = Get-Credential 
         
      2. $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $LiveCred -Authentication Basic -AllowRedirection
         
         1. If it fails to execute, then:
            
            1. Set-ExecutionPolicy RemoteSigned 
               
            2. …. Or unrestricted if you are brave
               
      3. Start a session to import the Outlook Live commands into your session.
         
         1. Import-PSSession $Session
            
         2. Setup RBAC impersonation using built-in role "ApplicationImpersonation"
            
3. Define RBAC impersonation in Powershell:
   
   1. New-ManagementRoleAssignment -Name EWSImpersonation -Role ApplicationImpersonation -User deleg8@livetest.YOURDOMAIN.com
      
   2. After you are done, disconnect Windows PowerShell from Outlook Live:
      
      1. Remove-PSSession $Session