General and Source Platform Prerequisites - Migrating From Microsoft 365

If you are using Modern Authentication (which is recommended), please refer to General Prerequisites and Source Platform Prerequisites sections in the Microsoft 365 to Google Workspace migration guide. For more information on Modern Authentication for Microsoft 365, please see this article.


  • The username of a Global administrator account within your Microsoft 365 environment.

  • If migrating files from OneDrive, you must have the sharepoint admin URL. This is something like:

  • Office 365 Groups Azure App Registration - Source or Destination

  • Set up a Google project and a service account for your destination domain

For information about migrating Office 365 Public Folders, please see Migrating Exchange Public Folders.


Source Platform Prerequisites

These steps should be completed in your source environment


Office 365 Groups Azure App Registration

The following steps are required to migrate from/to Office 365 Groups.

  • Login to the Microsoft Azure portal for your chosen domain.
  • Click 'Azure Active Directory' and then 'App registrations'


  • Click 'New registration'
    • Enter a name for your application (This can be changed at any time).
    • Supported Account Types should be left as the default 'Accounts in this organizational directory only (NAME OF COMPANY)'
    • Redirect URI is not required.
    • Click 'Register'
    • On successfully registering your application you will be redirected to the below screen.
    • NOTE : Open Notepad and Copy 'Application (client) ID'. This is the 'Client Id' required in the CloudM Migrate configuration.


  • Click 'Certificates & secrets'
  • 'New client secret'
  • Select 'Never'
  • Click 'Add'
  • Client Secret will be generated and the client secrets table populated like below.
  • NOTE : Copy the value generated and paste the value into notepad. This is the 'Client Secret' required in the CloudM Migrate configuration.


  • Click 'API Permissions'
  • Remove the default 'User.Read' by selecting the row and clicking 'Remove permission'
  • Click 'Add a permission', under 'Microsoft APIs' select 'Microsoft Graph'
  • Click 'Application Permission'
  • Under 'Select Permissions' type the name of the permission you would like to add. Once all added, click 'Grant admin consent for '(Name of company)
If you have not already done so, please insure that all permissions have been granted by clicking the 'Grant admin consent for (Company name)' button.

Office 365 Groups as a Source

  • Directory.Read.All
  • Directory.ReadWrite.All
  • Group.Read.All
  • Sites.ReadWrite.All



Office 365 Groups as a Destination

  • AuditLog.Read.All
  • Directory.Read.All
  • Group.Read.All
  • Group.ReadWrite.All
  • Sites.ReadWrite.All


Was this article helpful?
10 out of 21 found this helpful