Issue

When selecting Microsoft 365 (M365) as the source or target during migration, users may encounter the error message:

“Insufficient privileges to complete the operation”

Cause

The error appears if the application required for authentication is not properly registered in Microsoft Entra ID (Azure AD) or missing necessary permissions.

Resolution

To resolve this issue, ensure that application is correctly registered in Microsoft Entra ID (Azure AD) and configured with the necessary permissions.

Register Application in Microsoft Entra ID (Azure AD)

Registering an application in Microsoft Entra ID integrates the app with your organization’s identity system, ensuring secure access and proper authentication for migrations.

Steps to Register a New Application

  1. Login to the Microsoft Entra admin center.


     
  2. Navigate to Identity > Applications > App registrations.
  3. Click New registration.


     
  4. In the Name field, enter a name for the application (e.g., MigrationApp1) and leave default options.


     
  5. Click Register.

Assign API Permissions

  1. Go to the Application Overview page.


     
  2. Under Manage, click API permissions.
  3. Click Add a permission.


     
  4. In the Request API permissions pane:
    • Select Microsoft APIs > Microsoft Graph > Application permissions.


       
    • Expand User and select User.Read.All.


       
    • Navigate to APIs my organization uses, search for Office 365 Exchange Online, and select it.


       
    • Expand Other permissions, select full_access_as_app, and click Add permissions.


       
  5. Back on the API permissions page, click Grant admin consent for , then confirm with Yes.


     

Assign a Client Secret

  1. In the registered application, go to Certificates & secrets.


     
  2. Under Client secrets, click New client secret.
  3. Enter a description (e.g., MigrationSecret), set an expiration period, and click Add.


     
  4. Copy the Client Secret Value immediately (it won’t be shown again after refresh).


     

Locate Required IDs

  1. Go to the registered application’s Overview tab.


     
  2. Note down the following:
    • Application (client) ID
    • Directory (tenant) ID
  3. Use the Client Secret Value created earlier.





     

Provide Details in Stellar Migrator for Exchange

In the Connect Source window (when selecting M365 as source):

  • Enter the Email Address.
  • Paste the Application (client) ID.
  • Paste the Directory (tenant) ID.
  • Paste the Client Secret Value.
  • Click Validate to confirm successful connection.

Additional Notes

  • If you see the “Insufficient privileges to complete the operation” even after manual setup, double-check API permissions and confirm that admin consent has been granted.
  • Ensure the client secret has not expired.

After registering the application correctly in Entra ID and entering valid credentials, the error “Insufficient privileges to complete the operation” will be resolved, and you can proceed with the migration.