Zimbra Migration: Failed To Authenticate
Grant LoginAsAdmin rights to the migration admin account.
Error Message
Zimbra Migration Error
Failed to authenticate: permission denied: need right: adminLoginAs for account [user's account]
This error occurs when the admin account lacks proper Zimbra delegation rights.
Missing Admin Rights
Root Cause
Missing Delegated Admin Rights
The administrative account configured in your source connector lacks
sufficient permissions to access user mailboxes. Specifically, it
needs the adminLoginAs
right granted to impersonate and access user accounts.
What is adminLoginAs?
The adminLoginAs right is a Zimbra delegated administration permission that allows an administrator to log in as any user in the domain. This is required for migration tools to access and export user mailboxes.
Solution
Grant AdminLoginAs Rights
Access Zimbra Admin Console
Log into the Zimbra Administration Console with a global administrator account.
Configure Delegated Admin
Navigate to Configure → Delegated Administration and create or edit the admin account used for migration.
Grant Required Rights
Assign the adminLoginAs
right to the migration admin account for the target domain or users.
Restart Migration
After granting the rights, restart the migration process.
Zimbra Documentation
CLI Alternative
You can also grant the adminLoginAs right using the Zimbra command line:
zmprov grr domain example.com usr admin@example.com adminLoginAs