Sometimes if another account has BEDSEWS Impersonation role given the we cannot add as second account. In order to add another account we need to remove the one which is already there.

Using the following Power Shell commands, EWS Impersonation Role can be removed.

1. Open Exchange Power Shell

2. Use the following Commands to remove the EWS Impersonation Role:

• Get-ManagementRoleAssignment Symantec
• Remove-ManagementRoleAssignment
• Remove-ManagementRole SymantecEWSImpersonationRole

3. Once the account is removed then you can add another account to the same role with following commands.

Command to create a new role called EWSImpersonationRole:

• New-ManagementRole -Name EWSImpersonationRole -Parent ApplicationImpersonation

Command to assign a user to EWSImpersonationRoleAssignment:

• New-ManagementRoleAssignment -Role EWSImpersonationRole -User EWSImpersonationRoleAssignment

Note:-

"EWSImpersonationRoleAssignment" would be BEDS or Symantec depending on the versions of Backup Exec. 

Backup Exec 20.x and earlier version would have " SymantecEWSImpersonationRoleAssignment"

Backup Exec 21 and later would have "BEDSEWSImpersonationRoleAssignment"

When Backup Exec is upgraded from earlier versions to 21.0 and if the impersonation object is already present it would remain the same  "SymantecEWSImpersonationRoleAssignment". If it is not present then it will be created as "BEDSEWSImpersonationRoleAssignment"

Applies To

Exchange 2010