Exchange 2010 GRT restore of individual emails fails with error “unable to create a role assignment for ApplicationImpersonation”

  • Modified Date:
  • Article ID:000014395


Granular Recovery Technology (GRT) based restore of Exchange 2010 data from Remot agent (RAWS) backup set or Agent for VMware Virtual Infrastructure (AVV) backup set fails with the error mentioned below.

Error Message

Final error: 0xe0000389 - The resource credentials for the restore job were unable to create a role assignment for ApplicationImpersonation. Review the credentials to ensure that it has the rights that are required for ApplicationImpersonation.
Final error category: Resource Errors

For additional information regarding this error refer to link V-79-57344-905


SGMON log from media server shows the following errors:

BEREMOTE: [0000]     [10036] [fsys\mb2]           - Checking Permissions for EWS
BEREMOTE: [0000]     [10036] [fsys\shared]        - EnsureEwsPermissions returned 80131501
BEREMOTE: [0000]     [10036] [fsys\mb2]           - FATAL: failed to aquire EWS ApplicationImpersonation rights
BEREMOTE: [0000]     [10036] [ndmp\loops]         - Error: CreateObj returns extended error e0000389


A hotfix is now available for this issue in the current version(s) of the product(s) mentioned in this article. Refer to the Hotfix link under Related Documents at the end of this article to obtain the hotfix needed to resolve the issue.



Terms of use for this information are found in Legal Notices.



Did this article answer your question or resolve your issue?


Did this article save you the trouble of contacting technical support?


How can we make this article more helpful?

Email Address (Optional)