When performing a Google Workspace to Google Workspace migration for only a subset of your users, special considerations are required for Google Drive. CloudM Migrate provides specific configuration options to handle these scenarios, which are typically driven by organizational changes such as divestitures or mergers and acquisitions (M&A).
This guide outlines two distinct migration scenarios based on how you handle permissions for users who are not part of the migration. This guide is designed to be used in conjunction with our general Google Drive to Google Drive Migrations - Best Practices and Concepts article.
Initial Configuration: Shared Steps for Both Scenarios
These steps are a baseline for all subset Drive migrations. Complete them before proceeding to your chosen scenario.
Preparation
- User Provisioning: Ensure all migrating users exist in the destination.
- Group Provisioning: All groups and their members must be properly created or mapped in the destination, including those containing non-migrating users. This is critical, as groups define sharing and access permissions.
CloudM Migrate Batch Configuration
-
Items to migrate
In theItems to migratetab, list only the users you are migrating. -
Source settings
-
Enable
Configuration>Source>Document>Migrate items only from listed users. - This ensures CloudM Migrate only migrates files owned by the users in your list.
-
Enable
-
Destination Settings
-
Enable
Configuration>Destination>Document>Allow alternate item ownership. - This setting allows folders owned by non-migrating users, which a migrating user has access to, to be transferred to the migrating user. This preserves their MyDrive folder structure.
-
Enable
Scenario 1: Maintaining Permissions for Non-Migrating Users
This strategy is for migrations where you must preserve all sharing permissions for both migrating and non-migrating users in the destination.
Specific Configuration
In addition to the Initial Configuration, you must configure the following:
-
Address Replacements CSV
Use an Address Replacements CSV file to map the email addresses of all migrating users (and their aliases), all groups, and the migration domains. -
Advanced settings
-
Non-matched address replacement behavior: Navigate to
Configuration>Advanced settings>Address replacementand setNon-matched address replacement behaviourtoRetain original. - This ensures permissions for non-migrating users are preserved with their original addresses.
-
Non-matched address replacement behavior: Navigate to
Watchpoint: CloudM Migrate performs a copy operation
CloudM Migrate creates a new file in the destination rather than moving the original from the source. This means that throughout the migration, there are two separate files: the original source file and the new migrated file in the destination.
In this subset migration scenario, both migrating and non-migrating users will have access to both versions of the file.
To avoid data discrepancies and ensure a clean transition, we strongly recommend the following:
- During the migration: The source file remains the source of truth. Do not touch the destination files until the entire migration is complete.
- After the migration: The new file in the destination becomes the source of truth. We recommend removing access to the source files for all migrating users, or deleting the source users' accounts entirely, to prevent confusion and ensure everyone is working from the correct version.
Scenario 2: Not Maintaining Permissions for Non-Migrating Users
This strategy is for migrations where you do not need to preserve permissions for non-migrating users. Their permissions will not be carried over to the destination environment.
Specific Configuration
In addition to the Initial Configuration, you must configure the following:
- Address Replacements: Create an Address Replacements CSV that contains domain replacements, migrating users, and groups.
-
Advanced Settings:
-
Non-matched address replacement behavior
Navigate toConfiguration>Advanced settings>Address replacementand setNon-matched address replacement behaviourtoReplace domain. -
Replace CSV addresses only
EnableConfiguration>Advanced settings>Address replacement>Replace CSV addresses only. - This is critical for ensuring only addresses in your CSV are replaced.
-
Non-matched address replacement behavior
Migration Behavior
This configuration prevents CloudM Migrate from applying permissions for non-migrating users. While the tool will attempt a domain replacement on all explicit file and folder permissions, it will only succeed for users who have a corresponding, replaced address in the destination (i.e., the migrating users). As a result, permissions for non-migrating users will not be applied to the migrated files in the destination.
Additional Considerations
Username Conflicts
Username conflicts can occur if a user already exists at the destination domain with a username prefix that matches a source user's email address.
Example:
- Source User:
j.smith@source.com - Existing Destination User:
j.smith@destination.com - Unrelated third-party user exists at the destination as
j.smith@other.com.
To prevent this, the Replace CSV addresses only setting is crucial. It ensures that CloudM Migrate only performs replacements on the email addresses explicitly listed in your Address Replacements CSV file. You must include all migrating users in this CSV to ensure that only the correct, intended addresses are updated during the migration.
Related Articles
- CloudM's Recommended Migration Strategy
- Best Practice Guide: Google Drive to Google Drive Migrations
- Best Practice Guide: Google Workspace to Google Workspace (Domain-Switch) Migrations
- Google Workspace to Google Workspace Migration Watchpoints
- Google Workspace - Source Settings
- Google Workspace - Destination Settings
- Address Replacements