On Demand Migration Current

Before migrating user or group accounts, check if the target tenant already contains accounts from the source tenant to avoid duplication. You can match accounts from the Account List View. Alternatively, you can use a CSV file to manually match or map accounts with the New Account Mapping from File Task wizard, including those with different attributes or those not yet present in the target tenant.

You can match source accounts with existing target accounts that have the same attributes directly in the Account List View. For accounts with different attributes, use a CSV file to specify the match. When you match accounts, the target account information is displayed in the Account List View. During migration, the target account will be updated if it already exists or created if it does not exist.

For mapping source accounts to new target accounts, use a CSV file. When you map accounts, the target account information is displayed in the Account List View. During migration, new target accounts will be created based on the mappings.

If needed, you can reset all existing matches and mappings to start over.

NOTE: If a source account is not matched or mapped, and a target account exists with the same Name, UserPrincipalName or PrimarySmtpAddress, then the account migration will fail.

Example 1: Matching accounts

Jordan Davis is a user in the source tenant. If Jordan Davis exists in the target tenant as well, you can match the accounts by display name directly from the Accounts List View by using the New Account Matching Task wizard.

Some users in the source may have one set of matching attributes like display name, while others may have another set of matching properties like email, mail nick name, immutable id or employee id. You can run the Account Matching Task multiple times, and each time you can specify a different matching attribute for the selected set of users.

When accounts are successfully matched, the Account State column value in the Accounts List View will change to Matched. When matched accounts are migrated, the target account will be updated with the attribute values of the source, and permissions are merged.

When accounts cannot be matched, the Account State column value in the Accounts List View will remain as Discovered. When unmatched accounts are migrated to the target tenant, then On Demand Migration automatically uses the source account information to create this account in the target tenant.

Example 2: Merging accounts

Group A and Group B are two groups in the source tenant that must be merged with Group C that exists in the target tenant. You can match one or more accounts from the source tenant to a single account in the target tenant by using a CSV file in the New Account Mapping from File Task wizard. When the task completes successfully, the Account State column value in the Account List View will change to Matched for both Group A and Group B. Information about group C will also be displayed.

The order in which the two groups from the source are migrated will determine the outcome for the target group in a merger. If Group A is migrated first, then Group C is renamed as Group A in the target. The permissions of Group C are retained, and permissions from Group A that were not in Group C are added (permissions are merged). When Group B is migrated, Group C that was renamed to Group A in the target will be renamed again to Group B, and the permissions are merged once more.

Example 3: Creating new accounts

Group X in the source tenant must be mapped to a new Group Z that does not yet exist in the target tenant. You can accomplish this by using a CSV file with the New Account Mapping from File Task wizard. After successfully completing the task, the Account State column in the Account List View will indicate Mapped for Group X, and information about Group Z will also be displayed.

When Group X is migrated, a new Group Z will be created in the target tenant based on the attributes specified in the CSV file. All the permissions and details from Group X will be transferred to Group Z. The values provided in the CSV file that are used to create Group Z will remain unchanged even if you update Group X before migration.

Avoid mapping multiple accounts from the source tenant to non-existent accounts in the target tenant, as this will cause the migration to fail.

In this topic:

Matching accounts selected from the accounts list
Matching or mapping accounts with a CSV file
Reviewing the Account Matching Task
Reviewing the Account Matching Task Events

Matching accounts selected from the accounts list

Log in to Quest On Demand and choose an organization if you have multiple organizations.
From the navigation pane, click Migration to open the My Projects list.
Create a new project or open an existing project.
Click the Accounts tile, or click Open from the Accounts tile to open the Accounts and User Data dashboard.
Go to the Accounts tab and select List View if not already selected.
Select the accounts you want to match and then click Match > Match Selected from the List View menu. The New Account Matching Task wizard starts. Each step is described below:
Start
1. Task Name - You can specify a custom name. The default name is Account Matching Task.
Account Matching
1. Select and configure the options as described below:
  - Clear existing matches - all matches are cleared.
  - Match by attribute - use the specified attribute pairs to match accounts in the source and target tenants. Select the same matching attribute for the Source attribute and Target attribute. The matching attributes are as described below:
    - displayName - the attribute of the account as specified in the same active directory property.
    - mail - email address
    - mailNickname - email alias used in Exchange servers.
    - ImmutableId - a specific attribute for a Microsoft 365 account object that is synchronized from on premise Active Directory. When AAD Sync is used with the default settings on Uniquely Identifying your users, the Active Directory objectGUID is used as the immutableId.
    - employeeId - the identifier of an employee in active directory.
2. Click Next.
Notification
1. Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
  - Only in a case of failure - Select this option to send the email if the discovery task fails to complete successfully.
2. Recipients - enter the email address of the recipients of this email. You can specify multiple recipient email addresses separated by semicolon.
Schedule
1. Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
  - Run now - task runs immediately.
  - Run later - task must be started manually.
  - Schedule - task will be started at a future date and time entered in the corresponding calendar field.
2. Click Next.
Summary
1. Verify the task specifications as described below:
  - Name - name of the task. The default name is Account Matching Task. You can specify a custom name.
  - Source tenant - name of the tenant where the statistics will be collected.
  - Target tenant - name of the target tenant in this project.
  - Assign Licenses - value is Yes.
  - Scheduled start - date and time when the task will start. Now indicates that the task will start immediately.
2. Click Back to revise or review a previous step or click Finish to complete the task wizard and start the task as scheduled.

Matching or mapping accounts with a CSV file

Use this method to match or map accounts from the source to accounts in the tenant that have different attributes. The CSV file lets you specify the accounts that you want to map and ignore the rest. You can then use this file in the New Account Mapping from File Task wizard to match or map the accounts from the source to the target tenant.

The steps are as follows:

Download the relevant CSV template.
Prepare the CSV file.
Start the Account Mapping from File Task.

TIP: You can get a list of users or groups for your CSV file along with pertinent information directly from the Microsoft 365 Admin Center.

Log in to the Microsoft 365 admin center with the credentials of your source tenant administrator.
Export Users:
1. From the navigation pane, click Active users.
2. If needed, you can filter the set of users that you want to export. Then click Export. A Users_<timestamp>.csv file will be downloaded to your computer.
Export Groups:
1. From the navigation pane, click Active groups.
2. Select the Microsoft 365 tab in the Active Groups page.
3. If needed, you can filter the set of groups that you want to export. Click Export and then click Export groups in this list. A Groups.csv file will be downloaded to your computer.
Repeat steps 1-3 for the target tenant.

Download the relevant CSV template

Log in to Quest On Demand and choose an organization if you have multiple organizations.
From the navigation pane, click Migration to open the My Projects list.
Create a new project or open an existing project.
Click the Accounts tile, or click Open from the Accounts tile to open the Accounts and User Data dashboard.
Select the Accounts tab and select List View if not already selected.
From the List View menu click Match > Map From File. The New Account Mapping from File Task wizard starts. Each step is described below:
Start
1. Task Name - You can specify a custom name. The default name is Account Mapping from File Task.
Mapping File
1. Match with existing account - select this option to match the source account with an existing target account.
2. Map to new account - select this option to prepare a new user or group account with the specified information. The new user or group will be created during migration.
3. Click Download Example File.
4. Click Cancel to exit the wizard.

Prepare the CSV file

Create a CSV file and add the attributes of the users and groups you want to match or map from the source to the target tenant. You can use any of the two formats shown below:
NOTE:

User account pairs in which one of the accounts is a guest account are not supported.
CSV file names with non-ASCII characters are not supported.
CSV formats to match with an existing target user or group account

You can prepare the CSV in one of two formats to match the source account with an existing target account. If a match is not found, the source account is created in the target tenant during migration.

Format 1 Using the SourceUPN and TargetUPN
- SourceUPN - Source account name in the format of an email address based on the Internet standard RFC 822. Do not use a mail nickname or proxy address.
- TargetUPN - Target account name in the format of an email address based on the Internet standard RFC 822. Do not use a mail nickname or proxy address.
Format 2 Using the SourceObjectId and TargetObjectId
- SourceObjectId - Globally unique identifier (GUID) of the source account.
- TargetObjectId - Globally unique identifier (GUID) of the target account.
CSV formats to map to a new target user or group account

You can prepare the CSV in one of two formats as described below. The values specified in the CSV are used to create the new account and these values will persist even if you update the source account. If you don't specify the optional attributes, these values will be copied from the source account. The new user or group account will be created during migration.

Format 1 For mapping to a new target user account
- SourceUPN - User’s login name in the format of an email address in the source tenant.
- TargetUPN - User’s login name in the format of an email address that will be created in the target tenant.
- TargetDisplayName - (optional). This is the name that is shown in various Microsoft services and applications (e.g., John Doe). It typically includes both the first and last names of the user and is used for user identification in the directory and email communications.
- TargetAlias - (optional). Alternative email address or identifier for the user. It allows users to receive emails sent to different addresses that point to the same mailbox.
- TargetPrimaryEmail - (optional). Main email address associated with the user account. It is used for logging in, receiving emails, and as the main identifier for the user.
- TargetFirstName - (optional). Given name of the user (e.g., John). It’s part of the user’s full name and is used in personal settings and directories.
- TargetLastName - (optional). Surname or family name of the user (e.g., Doe). Like the first name, it is part of the user’s full name and is used in personal settings and directories.
Format 2 For mapping to a new target group
- SourceGroupName - Name of the group in the source tenant.
- TargetGroupName - Name of the group in the target tenant.
- TargetAlias - (optional). Alternative email address or identifier for the group. It allows the group to receive emails sent to different addresses that point to the same mailbox.
- TargetPrimaryEmail - (optional). Main email address associated with the group.
Save the CSV file that you created.

Start the Account Mapping from File Task

Log in to Quest On Demand and choose an organization if you have multiple organizations.
From the navigation pane, click Migration to open the My Projects list.
Create a new project or open an existing project.
Click the Accounts tile, or click Open from the Accounts tile to open the Accounts and User Data dashboard.
Select the Accounts tab and select List View if not already selected.
From the List View menu click Match > Map From File. The New Account Mapping from File Task wizard starts. Each step is described below:
Start
1. Task Name - You can specify a custom name. The default name is Account Mapping from File Task.
Mapping File
1. Match with existing account - select this option to match the source account with a target account specified in the CSV file. During migration, if a match is found, the source account is updated, and permissions are merged. If a match is not found, the target account including permissions is created from the source.
2. Map to new account - select this option to create a new user account or group specified in the CSV file. The user account or group will be created in the target tenant during migration with information provided in the CSV file. During migration, the attributes of the new target specified in the CSV will be retained and all other attributes and permissions will be copied from the source account.
3. Click Browse and select the CSV file with the account maps that you prepared.
4. Click Next.
Notification
1. Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
  - Only in a case of failure - Select this option to send the email if the discovery task fails to complete successfully.
2. Recipients - enter the email address of the recipients of this email. You can specify multiple recipient email addresses separated by semicolon.
Schedule
1. Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
  - Run now - task runs immediately.
  - Run later - task must be started manually.
  - Schedule - task will be started at a future date and time entered in the corresponding calendar field.
2. Click Next.
Summary
1. Verify the task specifications as described below:
  1. Name - name of the task. The default name is Account Mapping from File Task. You can specify a custom name.
  2. Source tenant - name of the tenant where the statistics will be collected.
  3. Target tenant - name of the target tenant in this project.
  4. Scheduled start - date and time when the task will start. Now indicates that the task will start immediately.
2. Click Back to revise or review a previous step or click Finish to complete the task wizard and start the task as scheduled.

Reviewing the Account Matching Task

Open the Tasks tab.
Select the account discovery task that you want to review.
In the task details pane that opens, the information presented is as described below:
1. Type - Type of the task. The type is Matching.
2. Created - Date and time when the task was created.
3. Modified - Date and time when the task was last updated.
4. State - State of the task.
5. Last Operation - The action that was most recently performed in this task.
6. Schedule - Date and time when the task started. Now indicates that the task started immediately after the task was created.
7. Accounts (number) - The number of accounts that were selected for matching and the number of accounts passing through the various states of the task from New to Completed.
8. Events (number) - Number indicates the count of events that the task encountered. The values indicate the type of the events and the event count for each type.

Reviewing the Account Matching Task Events

Open the Tasks tab.
Select the account discovery task for which you want to review the events.
In the task details pane that opens, click Events (number). The Events tab opens with a filtered list of events for the selected task.
Select an event that you want to review. In the task details pane that opens, the information presented is as described below:
1. Object - name of the account object if applicable.
2. Task - name of the task.
3. Time - date and time when the event occurred.
4. Category - type of task. For account mapping tasks, the category is Matching.
5. Summary - a descriptive statement about the event.

Collecting Statistics

A Collect Account Statistics Task conducts an assessment of all accounts in the source tenant and matching accounts in the target tenant.

Each Collect Account Statistics Task generates events. Events are milestones that a task achieves as it runs. For example, when an Collect Account Statistics Task starts, an event is logged and it appears in the events list. When the number of accounts that are selected for assessment is large, the Collect Account Statistics Task divides the total number of accounts into manageable sets. Each set is called a batch. When a batch of accounts is assessed, another event occurs.

NOTE: Before you proceed, verify that the source tenant accounts have been discovered. For more information see Discovering Accounts

In this topic:

Create and run a Collect Account Statistics Task
Review the Collect Account Statistics Task
Review the statistics collected
Review the events for the Collect Account Statistics Task

Create a Collect Account Statistics Task

Log in to Quest On Demand and choose an organization if you have multiple organizations.
From the navigation pane, click Migration to open the My Projects list.
Create a new project or open an existing project.
Click the Account tile, or click Open from the Account tile to open the Accounts and User Data migration workspace.
Select the Accounts tab and then select List View if not already selected. Then select any account in the list to activate the menu options.
From the Actions menu, click More> Collect Statistics. The New Collect Account Statistics Task wizard starts. Each step is described below:
Description
1. Retrieve external sender permissions for distribution groups - retrieves the permissions set for external users who are allowed to send email to distribution groups.
2. Collect statistics from target - select this option to collect statistics from the target tenant and generate the Comparison Report.
3. Retrieve group membership details - select this option to retrieve group memberships of group type accounts.
4. Click Next.
Notification
1. Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
  - Only in a case of failure - Select this option to send the email if the discovery task fails to complete successfully.
2. Recipients - enter the email address of the recipients of this email. You can specify multiple recipient email addresses separated by semicolon.
3. Click Next.
Schedule
1. Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
  - Run now - task runs immediately.
  - Run later - task must be started manually.
  - Schedule - task will be started at a future date and time entered in the corresponding calendar field.
2. Click Next.
Summary
1. Verify the task specifications as described below:
  1. Name - name of the task. You can specify a custom name. The default name is Collect Account Statistics Task.
  2. Source tenant - name of the tenant where the statistics will be collected.
  3. Scheduled start - date and time when the task will start. Now indicates that the task will start immediately.
2. Click Back to revise or review a previous step or click Finish to complete the task wizard and start the task as scheduled.

Review the Collect Account Statistics Task

Open the Tasks tab.
Select the Collect Account Statistics Task that you want to review.
In the task details pane that opens, the information presented is as described below:
1. Type - type of the task. The type is Account Assessment.
2. Created - date and time when the task was created.
3. Modified - date and time when the task was last updated.
4. State - state of the task.
5. Last Operation - action that was most recently performed in this task.
6. Schedule - date and time when the task started. Now indicates that the task started immediately after the task was created.
7. Accounts (number) - number of accounts processed and their task status.
8. Events (number) - number of events that the task encountered.

Review the statistics collected

Open the Tasks tab.
Select the Collect Account Statistics Task that you want to review.
From the task details pane, click Download Premigration Report. If comparison reports were generated, click Download comparison report.
Download and save the ZIP file to a suitable folder, and extract the report.

NOTE: Premigration reports are also available from the following tasks:

Discover All
Discover From File
Discover From Security Groups
Refresh Selected Accounts

Review the Collect Account Statistics Task Events

Open the Tasks tab.
Select a task named Collect Account Statistics Task that you want to review.
In the task details pane that opens, click Events (number). The Events tab opens with a filtered list of events for the selected task.
Select an event that you want to review. In the task details pane that opens, the information presented is as described below:
1. Object - name of the account object if applicable.
2. Task - name of the task.
3. Time - date and time when the event occurred.
4. Category - type of task. the value is Account Assessment.

Assessment

Migrating Accounts

Caution: Don’t start a migration before the discovery task is finished. Running a matching task is recommended.

In this topic:

Considerations for Guest User Migration
Preferred Data Location
Starting an Account Migration Task
Reviewing the Account Migration Task
Reviewing the Account Migration Task Events

Considerations for Guest User Migration

TIP: Guest user accounts have a specific icon to distinguish them from other domain members.

On Demand migration can process all guest user types supported by Microsoft. Before adding a guest user account to the migration task, consider the following:

Guest user account cannot be migrated if an original account for this guest user is already in the target tenant. The guest user account should be matched but not migrated.
Guest user account cannot be migrated in case a guest user account of the same original account is already in the target tenant. To update the target guest user account properties create a matching task to pair these guest user accounts and then migrate the source guest user account again
Guest user account cannot be migrated in case the invitation procedure in source domain is not finished yet. In case acceptance procedure was skipped (this case is deprecated now, but such guest users still exist), and the acceptance status is empty, guest user can be migrated successfully.
A regular source user mapped to a target guest user during migration, will be converted to a regular user. If the target guest user was created in an on-premise environment, you must manually convert the target guest user to a regular user.

Preferred Data Location

For multi-geo enabled tenants, each account could be assigned a Preferred Data Location (PDL) property in Azure Active Directory. During account migration the property is migrated from source to target tenant. If the preferred data location is set in the source account then the same setting can be migrated to the target. If the preferred data location is absent in the source tenant then it will either not be set on the target or it will use the default location of the target tenant. This applies only for general tenant to multi-geo tenant and multi-geo tenant to multi-geo tenant migrations.

Starting an Account Migration Task

Log in to Quest On Demand and choose an organization if you have multiple organizations.
From the navigation pane, click Migration to open the My Projects list.
Create a new project or open an existing project.
Click the Accounts tile, or click Open from the Accounts tile to open the Accounts and User Data migration workspace.
Click the Accounts tab and select List View if not already selected.
Select the accounts you want to migrate. If you are planning to migrate Microsoft 365 Groups including content, see Microsoft 365 Groups Migration.
Click Migrate from the Actions menu. The New Account Migration Task wizard starts. Each step is described below:
Custom Target Domain
1. Configure the options as described below:
  - Custom target domain name - select the domain you want to use for the UPN and primary SMTP address of accounts created during the migration process.
    
    NOTE: Accounts that already exist in the target tenant will not have their current UPN or primary SMTP email address modified.
  - Set target PDL - choose how the Preferred Data Location (PDL) will be assigned to target accounts created in multi-geo tenants. This applies only for general tenant to multi-geo tenant and multi-geo tenant to multi-geo tenant migrations. The Microsoft 365 multi-geo feature must be available and enabled in the target tenant, otherwise this option is ignored.
    - Migrate PDL value from source account - assign the same PDL value as the corresponding source account, or use the default location specified in the target tenant.
    - Select PDL value to assign - assign a specific PDL value to target accounts. Choose a PDL from the Location dropdown. See Microsoft 365 Multi-Geo availability for location codes.
2. Click Next.
Custom Source Domain
1. Configure the setting as described below:
  - Custom source domain for routing - select the custom source domain name for forwarding mail from the target account. If the domain is omitted, the primary SMTP address of the source tenant will be used as the forwarding address for the mail enabled user created by this task. Optionally, you can select the custom SMTP domain here that will be used as the forwarding address.
2. Click Next.
Guest Users
This option is used when guest users are migrated. For all other account types, this option is ignored.

Send invitation email - select this option to send an invitation email to migrated guest users. Guest users can either accept the invitation or authenticate with Microsoft to access secured applications. If this option is not selected, guest users must authenticate with Microsoft to access secured applications.
Notification
1. Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
  - Only in a case of failure - select this option to send the email if the discovery task fails to complete successfully.
2. Recipients - enter the email address of the recipients of this email. You can specify multiple recipient email addresses separated by semicolon.
Schedule
1. Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
  - Run now - task runs immediately.
  - Run later - task must be started manually.
  - Schedule - task will be started at a future date and time entered in the corresponding calendar field.
2. Click Next.
Summary
1. Verify the task specifications as described below:
  1. Name - name of the task. You can specify a custom name. Default name is Account Migration Task.
  2. Source tenant - name of the source tenant in this project.
  3. Target tenant - name of the target tenant in this project.
  4. Custom target domain name - domain name of your target tenant.
  5. Custom domain for forwarding - custom source domain or primary SMTP address of the source tenant used as the forwarding address for the mail enabled user created by this task.
  6. Scheduled start - date and time when the task will start. Now indicates that the task will start immediately.
2. Click Back to revise or review a previous step or click Finish to complete the task wizard and start the task as scheduled.

You can track its progress in the Tasks tab, view the summary on the Dashboard or monitor alerts and notifications in the Events tab. When accounts are matched successfully, the Status changes from New to Completed.

IMPORTANT: The account migration service does not synchronize end-user passwords as part of the data migration process. The migration administrator will need to reset or synchronize end-user passwords from the source tenant to the target tenant using native Microsoft 365 tools or third-party Single Sign On tools.

Reviewing the Account Migration Task

Open the Tasks tab.
Select the account discovery task that you want to review.
In the task details pane that opens, the information presented is as described below:
1. Type - Type of the task. The type is Migration.
2. Created - Date and time when the task was created.
3. Modified - Date and time when the task was last updated.
4. State - State of the task.
5. Last Operation - The action that was most recently performed in this task.
6. Schedule - Date and time when the task started. Now indicates that the task started immediately after the task was created.
7. Accounts (number) - The number of accounts that were selected for matching and the number of accounts passing through the various states from Migrating to Migrated.
8. Events (number) - Number indicates the count of events that the task encountered. The values indicate the type of the events and the event count for each type.

Reviewing the Account Migration Task Events

Open the Tasks tab.
Select the account discovery task for which you want to review the events.
In the task details pane that opens, click Events (number). The Events tab opens with a filtered list of events for the selected task.
Select an event that you want to review. In the event details pane that opens, the information presented is as described below:
1. Object - name of the account object if applicable.
2. Task - name of the task.
3. Time - date and time when the event occurred.
4. Category - type of task. For account migration tasks, the category is Migrate.
5. Summary - a descriptive statement about the event.