The Synergy JOIN service account requires full access to the exchange resources and user accounts that it will be booking meetings for. This is required both for testing purposes (when configuring Synergy JOIN) and also during the operation of Synergy JOIN.
It is possible to configure Synergy JOIN without full access to the resource and user accounts, however the minimum access that the service accounts requires is calendar access.
Below is a list of the minimum access levels Synergy JOIN requires along with the drawbacks with the permission level:
PublishingEditor: Allows the service account to CreateItems, CreateSubfolders, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderVisible, ReadItems
- This will allow the service account to work as normal, and only provides access to resource calendar and not the mailbox. The only problem that may occur with this is you may see errors when testing in the JOIN configuration tool.
Author: Allows the service account to CreateItems, DeleteOwnedItems, EditOwnedItems, FolderVisible, ReadItems
- This is the lowest level that JOIN is able to work with. This permission level will throw back errors when testing rooms in the Synergy JOIN configuration tool. To test Synergy JOIN with this setting, you will have to book meetings and test the OBTP functionality manually.