How to impersonate using Exchange Web Service API for specific actions

Question

Hi,

I have a service account SvcAcc to manage contacts (add/update/delete contacts) for all the exchange users. I Impersonate using the below cmdlet to manage contacts but it also allows SvcAcc to perform other functions (send email etc) on behalf of the user. 

cmdlet

New-ManagementRoleAssignment -Name:impersonationAssignmentName -Role:ApplicationImpersonation -User:serviceAccount

 

//impersonation code

   service.Credentials = new NetworkCredential(ServiceAccountUserName, ServiceAccountPassword, domain);
   service.ImpersonatedUserId = new ImpersonatedUserId(ConnectingIdType.SmtpAddress, userEmail);

 

please suggest how can i impersonate for only Contacts

Answer 1

Exchange Impersonation is an "all or nothing" model. An account that has impersonation rights can do everything as if it were the user it impersonates.

If you want more granularity, you may want to use delegate access instead.

---

David Claux | Program Manager - Exchange Web Services

Answer 2

thanx, can you plz guide me to use delegation for the desired functionlity

Answer 3

it will be great id you could provide me example code or something

Answer 4

Please check out the documentation.

---

David Claux | Program Manager - Exchange Web Services

Answer 5

That part of the documentation actually has code samples written with auto-generated proxies.

This part shows how to manipulate delegates with the EWS Managed API. To access another user's folder as a delegate, simply specify that user's mailbox in the folder Id:

FolderId inboxOfAnotherUser = new FolderId(WellKnownFolderName.Inbox, "[e-mail]");

---

David Claux | Program Manager - Exchange Web Services