Sites.Selected Permissions and On Demand Migration for SharePoint and Teams (4378526)

Create the ODM project for the migration

Create the ODM project for the migration in the usual way.

On the Consents page of the project creation wizard, make sure that the SharePoint – Selected Sites application is selected as required for your source or target tenant.

 


Use Graph Explorer to assign the application to specific site: 

The following steps in Graph Explorer will need to be performed for each site. For Teams migration, the steps will need to be performed for the team site as well as the sites for any Private or Shared channels associated with the team.

The user used to connect to the graph explorer must be a global administrator and must have at least SharePoint read (Viewer) permission for the sites to be added to the Sites.Selected permission.

1. Open Graph Explorer  
   https://developer.microsoft.com/en-us/graph/graph-explorer?adlt=strict 

2. Login to graph explorer using site administrator credentials.

3. Run GET https://graph.microsoft.com/v1.0/me in graph explorer to confirm the current user. 

4. Run GET https://graph.microsoft.com/v1.0/sites/<hostname>:/<relativeUrl> to get the site “id”. Note the format includes host name and relative site Url separated with a colon “:”. 
   

   e.g. 
   GET https://graph.microsoft.com/v1.0/sites/m365x13156933.sharepoint.com:/sites/TargetSitesSelected 

   Sample response: 
   { 

       "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#sites/$entity", 
       "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET sites('<key>')/microsoft.graph.getByPath(path=<key>)?$select=displayName,error", 
       "createdDateTime": "2025-02-17T17:49:32.977Z", 
       "description": "", 
       "id": "m365x13156933.sharepoint.com,59ce1e8e-cb4f-44e6-9f38-99ed413d7c1d,2b139a34-a9ae-491d-a767-06948ddfa38c", 
       "lastModifiedDateTime": "2025-02-17T17:53:55Z", 
       "name": "TargetSitesSelected", 
       "webUrl": "https://m365x13156933.sharepoint.com/sites/TargetSitesSelected", 
       "displayName": "Target Sites Selected", 
       "root": {}, 
       "siteCollection": { 
           "hostname": "m365x13156933.sharepoint.com" 
       } 
   } 

5. Copy the site “id” value as returned in the above response and run  
   
   Post command POST https://graph.microsoft.com/v1.0/sites/<siteId>/permissions with the following request body which includes the SharePoint or Teams application id and display name. Make sure to include “/permissions” at end of command. 
   e.g. For SharePoint – Selected Sites permission 
   POST https://graph.microsoft.com/v1.0/sites/m365x13156933.sharepoint.com,59ce1e8e-cb4f-44e6-9f38-99ed413d7c1d,2b139a34-a9ae-491d-a767-06948ddfa38c/permissions 
   with request body 
   { 
   "roles": ["fullcontrol"], 
   "grantedToIdentities": [{ 
   "application": { 
   "id": "8990c8ce-4afb-48f0-9e30-f1338ef249d ", 
   "displayName": " Quest On Demand - Migration - SharePoint – Selected Sites" 
   } 
   }] 
   } 
   Sample Response for SharePoint permission: 
   { 
       "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#sites('m365x13156933.sharepoint.com%2C59ce1e8e-cb4f-44e6-9f38-99ed413d7c1d%2C2b139a34-a9ae-491d-a767-06948ddfa38c')/permissions/$entity", 
       "id": "aTowaS50fG1zLnNwLmV4dHw1NzRkYTEyYS1mZGQwLTRiNDQtOWM0Zi1iMWExMjYxNjc2NzJAYjcyMzY5NjktYmQ1Yy00YjVhLTg1YjQtN2MwYmIxYTdjYzll", 
       "roles": [ 
           "fullcontrol“ 
       ], 
       "grantedToIdentitiesV2": [ 
           { 
               "application": { 
                   "displayName": " Quest On Demand - Migration - SharePoint – Selected Sites", 
                   "id": "8990c8ce-4afb-48f0-9e30-f1338ef249d “ 
               } 
           } 
       ], 
       "grantedToIdentities": [ 
           { 
               "application": { 
                   "displayName": " Quest On Demand - Migration - SharePoint – Selected Sites", 
                   "id": "8990c8ce-4afb-48f0-9e30-f1338ef249d "   
             } 
           } 
       ] 
   } 
   
   

 Running SharePoint migrations using Sites.Selected Permissions with ODMSP 
 
Sites.Selected on Source 

1. Grant the sites you want to migrate Sites.Selected permissions from Graph Explorer 

2. Task 

3. Migrate sites as usual. 

Sites.Selected on Target 

1. Pre-provision target sites 

2. Grant the sites you want to migrate Sites.Selected permissions from Graph Explorer 

3. Manually update the target site “Custom scripts” settings to “Allowed”

   1. Note that the Custom script setting is automatically reset to Blocked every 24 hours (to be confirmed)
      
      

4. Migrate sites as usual. 

Note that if Custom script setting is reset to blocked during a migration, the Sites Pages library may not be migrated. 

 Running Teams migrations using Sites.Selected Permissions with ODM Teams 

Site.Selected on Source

1. Grant the Teams or M365 Group sites you want to migrate Sites.Selected permissions for the SharePoint and Teams applications from Graph Explorer. For Teams grant the Private and Shared channel sites Sites.Selected permissions as needed.
2. Discover the teams or groups using Discover from File Task (for those teams or groups with Site.Selected permissions).
3. Provision the teams and groups discovered.
4. Migrate the teams and groups as usual.  
   

Sites.Selected on Target 

1. Discover Teams or M365 Groups. 

2. Provision Teams or M365 Groups. 

3. Grant the Teams or M365 Group sites you want to migrate Sites.Selected permissions for the SharePoint and Teams applications from Graph Explorer. For Teams grant the Private and Shared channel sites Sites.Selected permissions as needed. 

4. Migrate Teams or M365 Groups as usual. 

 
Note: If you are migrating Teams and SharePoint contents using the Standard and Customized (All SharePoint Content) manually update the target site “Custom scripts” settings to “Allowed”