In this article, you will find reference tables that summarize the permissions and authorizations you need to perform different migrations in ShareGate Desktop.
For more details on each permission, see Microsoft administrative permissions. For more information on Microsoft 365 roles, see the Microsoft documentation, About admin roles.
Index
Microsoft 365 and SharePoint on-premises
The following information is applicable to the source and destination.
| Microsoft 365 | SharePoint on-premises | |
|---|---|---|
| Global admin |
Grant consent to the Azure ShareGate Desktop application. Connect to your admin center to migrate multiple site collections. Migrate teams and Microsoft 365 groups. |
N/A |
| Farm admin | N/A | Connect to your central admin to migrate multiple site collections. |
| SharePoint admin |
Connect to your admin center to migrate multiple site collections. Migrate teams and Microsoft 365 groups once a global admin has consented the Azure ShareGate Desktop application. |
N/A |
| Site collection admin* |
Copy structure (site, lists, libraries, permissions, and more). Use Insane mode. |
Copy structure (site, lists, libraries, permissions, and more). Migrate OneDrive for Business and My Site. Note: You must also be site owner in SharePoint 2003. |
| Teams admin | Also needed to migrate teams with a SharePoint admin account (if you are a global admin, this is not required). | N/A |
| Term store admin |
Migrate content with managed metadata. |
Migrate content with managed metadata. |
| Full control permissions | Can replace site collection admin for Copy content only, Import from file share, Import from Google Drive, and Import-BoxDocument in Normal mode only. | Can replace site collection admin for Copy content only, Import from file share, Import from Google Drive, and Import-BoxDocument in Normal mode only. |
| Manage user alerts permissions | Copy user alerts. | Copy user alerts (you will need to install the server extension). |
| Read-only lock | Must be removed from your site collection(s). See Read-only lock for more information. | Must be removed from your site collection(s). See Read-only lock for more information. |
*Site collection admin permissions are required even if you have a higher permission level like SharePoint admin. For more information go to Administrative permissions.
File share
The following information is applicable to the source. See the table above for permissions related to the destination.
| File share | |
|---|---|
| Read | Required so the app can read the file share items. |
| Read permissions | Required so the app can read the item permissions. |
| Network drive mapping | Map your network drives so they can be accessed in the app. |
Google Drive
The following information is applicable to the source. See the table above for permissions related to the destination.
| Google Drive | |
|---|---|
| Google Drive Administrator | Required to add ShareGate Desktop to the Google Workplace allowlist. |
| Super Admin | The Google Apps domain permission is required to connect with ShareGate Desktop's Administrator mode. |
| Administrator mode | Useful when you want to migrate multiple users in your domain without connecting to each one of those accounts manually. |
| View users on your domain (read-only) | Needed for Administrator mode. We need to list all of your domain's users in order to display them in the Explorer, and so you can create user mappings. |
| View groups on your domain (read-only) | Needed for Administrator mode. We need to list your groups so you can create group mappings. |
| View domains related to your customers (read-only) | Needed for Administrator mode. We need to know what domains are associated with your Google Apps account to check if you are allowed to create credentials for users that have a different domain in their email address. |
Box.com
The following information is applicable to the source. See the table above for permissions related to the destination.
| Box.com | |
|---|---|
| Administrator credentials | Needed to authorize ShareGate Desktop to connect to your Box enterprise account. |