RESOLUTION:
For anything that includes user mapping
(preservation of created/modified identities, permissions migration)
we require the migration account to be member of Site Collection Administrators.
(Automated Site Collection Member lookup / modification can only be performed by Site Collection Administrators.)
For installing/using the Import Service, we require highly elevated permissions
For the migration using SharePoint web services, we just need the necessary permissions
- write to the target, that is all.
If the job is configured to create SharePoint Content Types, fill Managed Metadata ...,
we obviously need the required permissions.
For anything that includes user mapping, we need to use Site Collection Admin.
See also these links:
https://support.quest.com/technical-documents/migrator-for-notes-to-sharepoint/6.10/release-notes/2#TOPIC-822578
https://support.quest.com/technical-documents/migrator-for-notes-to-sharepoint/6.10/user-guide/17#TOPIC-822650
https://support.quest.com/technical-documents/migrator-for-notes-to-sharepoint/6.10/installation-guide
https://support.quest.com/technical-documents/migrator-for-notes-to-sharepoint/6.10/release-notes