An account that you use to connect to the target domain controller to restore objects and containers requires the following:
- Administrative rights for the target Active Directory
- Membership in the Exchange Organization Management group is required to provide for automatic mailbox re-connect for recovered user or group account
You can run the following Exchange Management PowerShell cmdlet to assign an appropriate role to the account on the Exchange server.
Add-RoleGroupMember “Organization Management” –Member “<user_name>”