Active Directory security groups migration from SharePoint 2013 to SharePoint Online

Question

Sites which has Active Directory security groups in their SharePoint permission groups cannot be migrated from SharePoint 2013 to SharePoint Online.

What are the alternative options for AD Security Groups ?

trevor seward · Answer

You should be able to replicate those security groups to Azure AD and migrate the site as-is.

You can use Azure AD Security groups, but keep in mind this will increase the burden on IT to manage them versus allowing specified site owners to manage their own access.

sajith g h · Answer

Trevor Seward&nbsp;&nbsp;When I did a migration from On Premise to SharePoint Online using the ShareGate Desktop Migration tool, these security groups did not added in the People and&nbsp; Groups of SharePoint Online Site.&nbsp;So the first step is&nbsp;&nbsp;replicate the AD security groups to Azure AD. Then Migrate the site right.&nbsp;

andrew hodges · Answer

Hi Sajith G H ,&nbsp;Sharegate will not migrate AD groups but if the AD group exists and can be resolved in SharePoint Online it will add it as part of the migration.&nbsp;I am not expert on AD but when requested in the past the AD group needs to be in an Organisation Unit that is synced to Azure AD for this to work.&nbsp;&nbsp;Hope that helps&nbsp;Andy&nbsp;&nbsp;

sajith g h · Answer

Andrew Hodges&nbsp;The following are the AD Security Groups in SharePoint 2013.Does the AD security group name will be the same in Azure AD or different ?BHC\domain usersCORPH\bcn groupCORPH\billing &amp; network applications developmentCORPH\billing &amp; network applications supportCORPH\business analytics &amp; automation developmentCORPH\business analytics &amp; automation supportCORPH\customer services developmentCORPH\customer services supportCORPH\data centers &amp; operationsCORPH\domain usersCORPH\enterprise systemsCORPH\it securityCORPH\service desk &amp; desktop servicesNT AUTHORITY\authenticated users&nbsp;

andrew hodges · Answer

HiSajith G H ,&nbsp;The domain users and authenticated users don't exist in Office 365 so you will have to use other groups for this. There is a default permission group called "Everyone Except External users" but I am not a fan of using this because at some point it is likely that external users will be given an account such as IT support or contractors. It makes more sense to create an "All Company Users" Azure AD group and add everyone or all departments to that, although that is a fair bit of work if your AD is not up to scratch.&nbsp;&nbsp;The rest I would have thought you would be able to sync to Azure AD and then use in the migration.&nbsp;&nbsp;Hope that helps&nbsp;Andy

Forum Discussion

Active Directory security groups migration from SharePoint 2013 to SharePoint Online

5 Replies

Resources