#Service Account Profile Authentication

If you want to use the service account profile to manage Exchange mailboxes / security groups and distribution lists, make sure the account within the profile has the SharePoint administrator role and the Exchange Administrator role, and that the service account does not have multi-factor authentication (MFA) enabled.

To find rules where the Exchange Administrator role is required, refer to Supported Rules for Service Level Policies and Supported Rules for Tenant Level Policies.