On February 20, Microsoft announced their intention to remove Application Impersonation for EWS from Exchange Online. If you have existing management role assignments, this article explains how to make the transition to RBAC-based assignments.
RBAC for Applications is a new method to secure Azure AD app access to Exchange Online mailboxes. In this article, we explain how to use Managed Identities in Azure Automation with RBAC for Applications making sure that scripts can only access selected mailboxes.
Microsoft has released the public preview of RBAC for Applications. The new mechanism allows tenants to control the access Azure AD apps have to mailboxes at a granular level. RBAC for Applications will replace application access policies.
