SOLVED

File share migration to SharePoint Online Permissions?

%3CLINGO-SUB%20id%3D%22lingo-sub-380603%22%20slang%3D%22en-US%22%3EFile%20share%20migration%20to%20SharePoint%20Online%20Permissions%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-380603%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20in%20the%20midst%20of%20planning%20the%20migration%20of%20our%20file%20shares%20to%20SharePoint%20Online.%3C%2FP%3E%3CP%3EIs%20there%20a%20tool%20that%20we%20can%20use%20to%20carry%20over%20the%20permissions%20in%20file%20shares%20to%20SharePoint%20Online%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-380603%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EFiles%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-382856%22%20slang%3D%22en-US%22%3ERe%3A%20File%20share%20migration%20to%20SharePoint%20Online%20Permissions%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-382856%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F305596%22%20target%3D%22_blank%22%3E%40Ozlem%3C%2FA%3E%26nbsp%3BGlad%20I%20could%20help!%26nbsp%3B%20Agreed%20about%20that%20table%2C%20it's%20a%20lot%20to%20take%20in%20and%20tally%20with%20given%20circumstances.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-382853%22%20slang%3D%22en-US%22%3ERe%3A%20File%20share%20migration%20to%20SharePoint%20Online%20Permissions%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-382853%22%20slang%3D%22en-US%22%3EThanks%20a%20lot%20for%20your%20quick%20help%20again%20Cian.%20I%20think%20I%20got%20it.%20Just%20trying%20to%20digest%20the%20table%20above%20a%20bit%20more.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-381674%22%20slang%3D%22en-US%22%3ERe%3A%20File%20share%20migration%20to%20SharePoint%20Online%20Permissions%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-381674%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F305596%22%20target%3D%22_blank%22%3E%40Ozlem%3C%2FA%3E%26nbsp%3BYes%2C%20for%20it%20to%20work%20at%20all%2C%20users%26nbsp%3Bmust%20be%20mapped%20between%20on-premises%20and%20SharePoint%20Online%2C%20usually%20done%20by%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fenterprise%2Foffice-365-integration%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Esyncing%3C%2FA%3E%20your%20Active%20Directory%20accounts%20to%20Office%20365%20or%20with%20an%20SPMT%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsharepointmigration%2Fcreate-a-user-mapping-file-for-data-content-migration%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Euser%20mapping%20file%3C%2FA%3E.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20only%20permissions%20that%20will%20be%20migrated%20are%20Read%20and%20Write.%20If%20a%20file%20has%20Write%20permission%20for%20user1%2C%20then%20the%20file%20will%20be%20set%20to%20Contribute%20for%20user1%20in%20SPO.%20If%20a%20file%20has%20Read%20permission%20for%20user1%2C%20then%20the%20file%20will%20be%20set%20to%20Read%20for%20user1%20in%20SPO.%20Special%20permissions%2C%20such%20as%20Deny%2C%20will%20not%20be%20saved.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20717px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F96690i1E64B21FC3463988%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Settings.png%22%20title%3D%22Settings.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EThese%20are%20the%20different%20combinations%20when%20using%20the%20setting%20above%20or%20not%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20895px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F96655i7B9531A8F1D4889D%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22File%20and%20folder%20permissions.png%22%20title%3D%22File%20and%20folder%20permissions.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-381421%22%20slang%3D%22en-US%22%3ERe%3A%20File%20share%20migration%20to%20SharePoint%20Online%20Permissions%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-381421%22%20slang%3D%22en-US%22%3E%3CP%3EOne%20more%20question.%26nbsp%3B%20I'm%20trying%20to%20understand%20the%20caveats.%26nbsp%3B%20Are%20there%20any%20situations%20where%20the%20permissions%20can't%20be%20carried%20over%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-381073%22%20slang%3D%22en-US%22%3ERe%3A%20File%20share%20migration%20to%20SharePoint%20Online%20Permissions%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-381073%22%20slang%3D%22en-US%22%3EThanks%20a%20lot%20Cian.%20I%20appreciate%20the%20quick%20reply.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-380820%22%20slang%3D%22en-US%22%3ERe%3A%20File%20share%20migration%20to%20SharePoint%20Online%20Permissions%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-380820%22%20slang%3D%22en-US%22%3ETake%20a%20look%20also%20to%20any%20of%20the%20commercial%20tools%20you%20can%20use%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-380689%22%20slang%3D%22en-US%22%3ERe%3A%20File%20share%20migration%20to%20SharePoint%20Online%20Permissions%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-380689%22%20slang%3D%22en-US%22%3E%3CP%3EMicrosoft's%20free%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsharepointmigration%2Fintroducing-the-sharepoint-migration-tool%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3ESharePoint%20Migration%20Tool%3C%2FA%3E%20can%20do%20this%2C%20migrating%20file%20shares%20to%20SharePoint%20Online%20and%20bring%20across%26nbsp%3Bpermissions%20with%26nbsp%3Bcaveats%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsharepointmigration%2Funderstanding-permissions-when-migrating%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3EFile%20and%20folder%20permissions%20when%20using%20the%20SharePoint%20Migration%20Tool%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

We are in the midst of planning the migration of our file shares to SharePoint Online.

Is there a tool that we can use to carry over the permissions in file shares to SharePoint Online?

8 Replies
best response confirmed by Juan Carlos González Martín (MVP)
Solution

Microsoft's free SharePoint Migration Tool can do this, migrating file shares to SharePoint Online and bring across permissions with caveats:

 

File and folder permissions when using the SharePoint Migration Tool

Take a look also to any of the commercial tools you can use
Thanks a lot Cian. I appreciate the quick reply.

One more question.  I'm trying to understand the caveats.  Are there any situations where the permissions can't be carried over? 

@Ozlem Yes, for it to work at all, users must be mapped between on-premises and SharePoint Online, usually done by syncing your Active Directory accounts to Office 365 or with an SPMT user mapping file.

 

The only permissions that will be migrated are Read and Write. If a file has Write permission for user1, then the file will be set to Contribute for user1 in SPO. If a file has Read permission for user1, then the file will be set to Read for user1 in SPO. Special permissions, such as Deny, will not be saved.

 

Settings.png

These are the different combinations when using the setting above or not:

 

File and folder permissions.png

Thanks a lot for your quick help again Cian. I think I got it. Just trying to digest the table above a bit more.

@Ozlem Glad I could help!  Agreed about that table, it's a lot to take in and tally with given circumstances.

Hi, reading this thread with some interest. I am migrating a large amount of data (approx 15TB) across different libraries / sites, but my source data has been azcopied into Azure Files so there are no permissions at source, does that render the user mapping file useless, or can I leave source column blank, but add the location and confirm that they are not a group