Recently I was troubleshooting an issue where a service account was granted the
Exchange RBAC ApplicationImpersonation role for another account. The following
PowerShell cmdlets were used to configure the impersonation permissions:
New-ManagementScope -Name "Generic Mailboxes" -RecipientRestrictionFilter "DisplayName -like 'Generic*'"
New-ManagementRoleAssignment -Name "Impersonate Generic Mailboxes" -Role "ApplicationImpersonation" -User "ServiceAccount" -CustomRecipientWriteScope