This article explains how to resolve an error that occurs during a Google Drive migration when CloudM Migrate cannot access a user's files.
1. Symptom
During the migration of a user's Google Drive data, the process fails, and the following error message appears in the migration logs:
ERROR: Unable to get file ACLs as the owner cannot use the drive API
This indicates that the migration tool is being blocked from accessing the file permissions (Access Control Lists - ACLs) for one or more files owned by the source user.
2. Cause
This error occurs for one of two primary reasons related to the source user's Google Workspace account:
-
The user account is suspended: Suspended users are immediately blocked from accessing their Google Workspace account and all associated services, including the Google Drive API.
-
The Google Drive service is disabled for the user: The user's account may be active, but if the Google Drive and Docs service has been turned off for their specific Organizational Unit (OU) or for their individual account in the Google Admin console, the API will be inaccessible.
3. Resolution
To resolve this issue, you must ensure the source user account is active and that the Google Drive service is enabled for them.
Step 1: Check the User's Account Status
-
Sign in to your Google Admin console.
-
Navigate to Directory > Users.
-
Search for the user account that is failing to migrate.
-
Check the user's status. If the account is suspended, the status will be clearly marked in red.
-
If suspended, select the user and click Reactivate to restore their account to an active state.
Step 2: Verify the Google Drive Service is Enabled
-
In the Google Admin console, navigate to Apps > Google Workspace.
-
Click on Drive and Docs.
-
Select Service status.
-
Ensure that the service is set to ON for everyone or is specifically enabled for the Organizational Unit (OU) that the user belongs to.
-
If the service is off for the user's OU, you will need to either:
-
Turn the service ON for that OU.
-
Move the user to an OU where the service is enabled.
-
Once you have confirmed the user is active and the Drive service is enabled, you can re-run the migration for the affected user in CloudM Migrate.