Explicit User Mappings
Explicit user mappings are generally used when trying to migrate a user account that is "orphaned": that is, it exists on the source but is no longer active (or may not be in Active Directory). While the user may not exist, the users data may still need to be migrated to the target.
One alternative to adding such an orphaned user to the target is to map the account to another user account. All of the users basic metadata would be migrated, but the user name would be populated with the mapped account name instead.
User mappings can also be imported using the Import mappings from XML option.
If you want to map all users (which includes "orphaned" users) from the source domain to a different domain on the target, you can do so using Domain Mappings.
To configure explicit user mappings:
1.In the Specify Global Mappings dialog, make sure the User Mappings tab is selected.
2.From the Source: drop-down on the left side of the dialog, select the source object containing the users you want to map to the target.
The Source list becomes populated with the users that have permissions for that object.
3.Use the information in the following table to determine the appropriate action to take.
|
If the user ... |
Then |
|---|---|
|
already exists on the target |
A.Select the source user that you want to map. B.From the drop-down on the right (target) side of the dialog, select the target object containing the user to which you want to map. C.The target list becomes populated with users that have permissions for the selected object. D.Select the target user to which you want to map the source user. |
|
does not already exist on the target |
A.Click Create New User to display the Create New User dialog. B.(Required) Specify a Login Name. NOTE: This is the most important field as it is used to create/add a new user and should automatically retrieve any necessary values from the target side authenticator. Be sure to use the appropriate format for the authentication method (for example domain\user name, the Microsoft 365 login name, or, if using Claims authentication, the appropriate Claims prefix and format). C.(Optional) Complete the Display Name and/or Email fields. If the Login Name does not authenticate for any reason, these fields will be used to fill out the user data. D.Click [OK]. |
4.Click Map.
The mapping displays in the lower half of the dialog.
5.Repeat steps 2-4 until you have completed mapping users.
NOTE: You can map multiple source users to a single target user.
Auto User Mapping
For migrations to SharePoint Online, unless users are mapped explicitly all users will be automatically mapped from a source domain to a domain with the same name on the target.
IMPORTANT: Users will not be automapped if the Import Pipeline is used.
For example, if you are migrating users from an Active Directory domain called quest on the source to users in a Microsoft 365 tenant domain has the same name, the users would be migrated as follows:
quest\amahfudh -> amahfudh@quest.onmicrosoft.com
quest\doconnor -> doconnor@quest.onmicrosoft.com
quest\fsullivan -> fsullivan@quest.onmicrosoft.com
quest\gbond -> gbond@quest.onmicrosoft.com
and so on.
NOTE: If the source and target domains have different names, you can use Domain Mappings.
To bypass some of the limitations with Auto User Mapping (including use of the Import Pipeline) and to provide more flexible mapping options for both on premises and online targets, you can instead use a utility available from Quest Support to generate, configure, and import User Mappings.
Generating, Configuring, and Importing User Mappings with the UserMappingCLI Utility
Quest Support offers a powerful command line utility to help with automatically generating and configuring user mapping files, along with PowerShell Cmdlets for importing user mappings as a .csv file. For a copy of the utility with complete instructions, visit https://support.quest.com/content-matrix/kb/311358/best-practices-for-generating-configuring-and-importing-user-mapping.
Domain Mappings
In addition to allowing you to map individual users explicitly, Content Matrix allows you to map all users from one domain to another, across both SharePoint on premises and SharePoint Online environments.
Domain Mapping can be used in conjunction with explicit user mapping. For example, you can map all users across a domain, and then map specific users into other user accounts.
NOTE: Domain mappings can also be imported using the Import mappings from XML option, but Quest recommends the use of the UserMappingCLI utility as the most powerful way to generate, configure, and import user mappings for a variety of scenarios.
IMPORTANT: If you want to migrate an AD group to a Microsoft 365 group that does not already exist on the target site, then you must use the Import mappings from XML option to map the source AD group SID to the target Microsoft 365 group ID.
|
|
Domain Mapping supports the following connection types on both source and target: ·SharePoint on premises local and remote (MEWS) Object Model ·SharePoint Online CSOM and the Import Pipeline. |
|---|
NOTE: If you do not specify an extension for an online domain, .com will be used.
EXAMPLES:
·If you have an on premises source domain called quest, and you map it to a SharePoint Online target domain called questsoftware.com, you could enter the mapping as shown below.
In this example, users would be migrated as follows:
quest\amahfudh -> amahfudh@questsoftware.com
quest\doconnor -> doconnor@questsoftware.com
quest\fsullivan -> fsullivan@questsoftware.com
quest\gbond -> gbond@questsoftware.com
and so on.
·If you have an on premises source domain called quest, and you map it to a SharePoint Online target domain called questsoftware.net, you would enter the mapping as shown below.
In this example, users would be migrated as follows:
quest\amahfudh -> amahfudh@questsoftware.net
quest\doconnor -> doconnor@questsoftware.net
quest\fsullivan -> fsullivan@questsoftware.net
quest\gbond -> gbond@questsoftware.net
and so on.
·If you have an online source domain called questsoftware.com and you map it to a target domain called questsoftware.net, you could enter the mapping as shown below.
In this example, users would be migrated as follows:
amahfudh@questsoftware.com -> amahfudh@questsoftware.net
doconnor@questsoftware.com -> doconnor@questsoftware.net
fsullivan@questsoftware.com -> fsullivan@questsoftware.net
gbond@questsoftware.com -> gbond@questsoftware.net
To map domains:
1.In the Specify Global Mappings dialog select the Domain Mappings tab.
2.Click New to display the Create Domain Mapping dialog.
3.Enter the Source Domain name and the Target Domain name. Use the information in the following table for guidance.
|
Source |
Target |
Format/Example |
|---|---|---|
|
On Premises |
On Premises |
Source Domain: quest Target Domain: questsoftware NOTES: When migrating Claims-enabled accounts, remember to include the Claims prefix. For example: i:0#.w|quest -> i:0#.w|questsoftware. |
|
On Premises |
SPO |
Source Domain: quest Target Domain: questsoftware (or questsoftware.com) |
|
SPO |
SPO |
Source Domain: questsoftware (or questsoftware.com) Target Domain: questsoftware.net |
4.Click [OK].