Impersonation Roles are required for the ResourceXpress Push Service when 20 or more profiles are in use, it is also required to use Modern Authentication to EWS (OAuth).
The Push Service is an add-on to the ResourceXpress application and will be enabled by default for any Exchange/O365 integrated SaaS deployments. The benefit of using the Push Service is to reduce the number of requests made from ResourceXpress to the Exchange/Office 365 environment. Instead of the ResourceXpress server polling every 60 seconds any new bookings or updates are automatically pushed by the Exchange/Office 365 service to ResourceXpress.
Starting in October 2020 Microsoft will begin retiring Basic Authentication to EWS. When this happens the method of authentication used by ResourceXpress must be OAuth. Please refer to Office 365 OAuth 2.0 Configuration for further instructions on configuring OAuth.
Create a new Management Scope for Resource Mailboxes
Use the above ‘Connecting to PowerShell’ instructions to establish a PowerShell connection to your Tenant.
Copy and paste the code below, change the -Name value to suit your environment.
# Create Management Scope
New-ManagementScope -Name "RXResourceMailboxes" -RecipientRestrictionFilter {RecipientTypeDetails -eq "RoomMailbox"}
Log into your O365 tenant as an Admin and navigate to Admin - Admin Centers - Exchange.
Create a new role under Permissions - Admin Roles.
The Write scope will be the new Management Scope created in PowerShell.
The Members should include the ResourceXpress service account that has already been granted Full Access Permissions to the resource mailboxes.
Click Save.
