Account for migration on Office 365

As best practice, we recommend that a dedicated user is created for migration, on both source and destination server.

User which is used for migration does not require an Office 365 license, it can be an administrator account or regular user which is a member of organization management group. In either case, it must have impersonation rights assigned to it.

When newly Office 365 account is created, first admin account is created as well. In order to create dedicated user admin account for Cloud Migration Platform, log on to Office 365 on login.microsoftonline.com and go to Admin panel.

On the dashboard, on Users panel click on Add a user

Populate the required fields:

First Name - e.g. Migration

Last Name - e.g. User

Display Name - it will be populated automatically but it can be changed to any friendly name

User Name - e.g. MigrationUser

Domain - Select the domain which you added when you created the O365 account (e.g. yourdomain.com or yourdomain.onmicrosoft.com)

Location - Select your country

Password - Select Let me create the password, type in the password (make sure it is strong) and uncheck Make this user change their password when they first sign in

Roles - Global Administrator

Product licenses - Select Create user without product license

On next page, deselect Send password in an email and click on close

Same thing may be achieved by using PowerShell:

Open PowerShell on your local computer and type in these commands to connect to Office 365 and enter your admin credentials when prompted:

$UserCredential = Get-Credential
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection
Import-PSSession $Session

You will need to connect also to MsolService and enter your credentials again:

Connect-MsolService

Create Migration user and assign admin rights to it:

New-MsolUser -FirstName Migration -LastName User -DisplayName "Migration User" -UserPrincipalName MigrationUser@yourdomain.com -Password SomePassword!

Add-MsolRoleMember -RoleName "Company Administrator" -RoleMemberEmailAddress migrationUser@yourdomain.com

Where:

• Migration is the example of the first name for migration user
• User is the example of the last name for migration user
• "Migration User" is the example of the display name for migration user
• MigrationUser@yourdomain.com is the full email address (user principal domain) for migration user
• SomePassword! is the example for the password. You can set it to anything you want as along as it meets the complexity requirements.

After account has been created, impersonation rights must be assigned to it.

If you don't whish for this user to have full administrative permissions, you can create a regular user with same procedure just for Roles select User (no administrator access) and not Global administrator as before.

Next go to Exchange panel (under Admin centers)

In Exchange admin center under Permissions select Admin roles and then double-click on Organization Management

Scroll down to see Members and click on + sign and add desired user (e.g. MigrationUser) and click on OK and then Save

This can also be achieved by using PowerShell:

Open PowerShell on your local computer and type in these commands to connect to Office 365 and enter your admin credentials when prompted:

$UserCredential = Get-Credential
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection
Import-PSSession $Session

You will need to connect also to MsolService and enter your credentials again:

Connect-MsolService

Create Migration user and assign admin rights to it:

New-MsolUser -FirstName Migration -LastName User -DisplayName "Migration User" -UserPrincipalName MigrationUser@yourdomain.com -Password SomePassword!

Add-RoleGroupMember -Identity "Organization Management" -Member migrationUser@yourdomain.com

Where:

• Migration is the example of the first name for migration user
• User is the example of the last name for migration user
• "Migration User" is the example of the display name for migration user
• MigrationUser@yourdomain.com is the full email address (user principal domain) for migration user
• SomePassword! is the example for the password. You can set it to anything you want as along as it meets the complexity requirements.

Same as for admin user, impersonation rights must be assigned to it.