Microsoft Entra ID · M365 Workloads & Services
Microsoft 365 Migration Administrator
Performs all migration functionality to migrate content to Microsoft 365 using Migration Manager.
Scope: Migrate content from various sources to Microsoft 365
Permissions
- Select migration sources
- Create migration inventories
- Schedule and execute migrations
- Download migration reports
- Create SharePoint sites for migration
- Manage migration project settings
Common use cases
- Google Drive migration
- Dropbox migration
- Box migration
- Egnyte migration
Best practices
- Plan migration in phases
- Validate content before migration
- Monitor migration progress
Security considerations
- Can create SharePoint sites
- Access to migration data
- Cannot migrate from file shares (need SharePoint Admin)
Common questions
When should I assign the Microsoft 365 Migration Administrator role?
Assign Microsoft 365 Migration Administrator when you need to: Google Drive migration; Dropbox migration; Box migration; and Egnyte migration. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Microsoft 365 Migration Administrator role do?
The Microsoft 365 Migration Administrator role grants permissions including: Select migration sources; Create migration inventories; Schedule and execute migrations; Download migration reports; Create SharePoint sites for migration; and Manage migration project settings. See the Permissions section above for the full list.
What are the security risks of the Microsoft 365 Migration Administrator role?
Key considerations when assigning Microsoft 365 Migration Administrator: Can create SharePoint sites; Access to migration data; and Cannot migrate from file shares (need SharePoint Admin). Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.