All Cloudiway migration tools require some sort of service account with its own set of permissions to function properly.
However, not all service accounts require Global Admin or Super Admin rights to your Office 365 or Google tenant.
Each migration product has its own Admin Guide describing the full pre-requisites of the tools your project requires before getting started.
In short, most Cloudiway Migration and Coexistence products do not require a Global or Super Admin account to migrate the data, but often these admin roles can make the job easier.
This article will share a quick overview of minimum permissions for the Cloudiway tools to function properly.
Office 365 migration service account
Your Office 365 Mail and Archive migration service account must have the Application Impersonation role assigned to it. It does not require Global Admin for data migration.
However, if you wish to migrate mailbox permissions, this is an administrative function which does require Global Admin rights.
The O365 OneDrive, SharePoint, Teams, and O365 Groups migration service account requires SharePoint Admin rights, not Global Admin rights.
Note that the Cloudiway tools also offer an optional automatic provisioning of the Azure App that is also required for file, site, team, and group migrations.
If you want Cloudiway to perform this step automatically, your service account needs Global Admin rights. However, you can do this manually with your personal Global Admin account following the appropriate admin guides and articles.
Google migration service account
Google Workspace migrations are a little bit different. You will need to allow Cloudiway’s own Google Service account to access your tenant using specific Google API’s in most cases.
While this does not require a Super Admin role for the service account, you should know and understand the API’s required for the appropriate access.
Each Google migration scenario has its specific list of API’s required and their respective admin guide explains what is required.
In some cases, a Google Super Admin service account is required or is very helpful in aiding the migration process.
For example, a Google Sites migration benefits from a Super Admin service account because that gives the Cloudiway migration tools complete access to all of the supported Google Sites to migrate.
However, if you need to use a limited service account, you will need to add that account with the Owner or Manager role to each Google Site that you need to migrate.
Coexistence admin rights
The Cloudiway GALSync tool will make administrative changes to your O365 Address List or Google Contacts section.
This requires a special set of permissions in Office 365 that are detailed in the GALSync Admin Guide. Also, there are specific API’s required for the Google Service account for GALSync to work properly.
The Cloudiway Free/Busy service account does not require Global Admin rights in your O365 tenant. For Google, this account requires a specific set of API’s.