Admin role needed to migrate users

%3CLINGO-SUB%20id%3D%22lingo-sub-88590%22%20slang%3D%22en-US%22%3EAdmin%20role%20needed%20to%20migrate%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-88590%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20starting%20to%20move%20some%20users%20from%20on-prem%20to%20Skype%20for%20Business%20Online.%20%26nbsp%3BDo%20you%20need%20to%20have%20Global%20Admin%20rights%20to%20be%20able%20to%20run%20PowerShell%20commnads%20in%20support%20of%20migrating%20users%20(%3CSTRONG%3EMove-CsUser%20-Identity)%3F%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EA%20%3CA%20href%3D%22https%3A%2F%2Ftechnet.microsoft.com%2Fen-us%2Flibrary%2Fjj204969.aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Etechnet%20article%3C%2FA%3Eseems%20to%20reference%20the%20need%20for%20Global%20Amdin%20rights%2C%20wondering%20if%20there%20is%20another%20way.%20%26nbsp%3B%22%3CSPAN%3ETo%20move%20an%20on-premises%20user%20to%20your%20Skype%20for%20Business%20Online%20tenant%2C%20run%20the%20following%20cmdlets%20in%20the%20Skype%20for%20Business%20Server%20Management%20Shell%2C%20using%20the%20administrator%20credentials%20for%20your%20Microsoft%20Office%20365%20tenant.%26nbsp%3B%22%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-88590%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESkype%20Operations%20Framework%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-88767%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20role%20needed%20to%20migrate%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-88767%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYes%20unfortunately%20you%20need%20Global%20Admin%20rights%20on%20your%20tenant.%20We%20questioned%20this%20with%20Microsoft%20in%20our%20meetings%20as%20we%20also%20felt%20that%20this%20was%20too%20much%20of%20an%20elevated%20credential.%20However%2C%20it%20seems%20that%20during%20the%20move%2C%20things%20get%20written%20to%20Azure%20AD%20not%20just%20SfB%20Online%20which%20is%20why%20the%20SfB%20Online%20Admin%20role%20is%20insufficient.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-88602%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20role%20needed%20to%20migrate%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-88602%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20standalone%20%22Lync%20Service%20Administrator%22%20role%20should%20be%20enough.%20Although%20I%20dont%20remember%20ever%20using%20anything%20other%20that%20GA%2C%20so%20maybe%20test%20with%20a%20single%20user%20first%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Regular Contributor

We are starting to move some users from on-prem to Skype for Business Online.  Do you need to have Global Admin rights to be able to run PowerShell commnads in support of migrating users (Move-CsUser -Identity)?

 

A technet article seems to reference the need for Global Amdin rights, wondering if there is another way.  "To move an on-premises user to your Skype for Business Online tenant, run the following cmdlets in the Skype for Business Server Management Shell, using the administrator credentials for your Microsoft Office 365 tenant. "

2 Replies

The standalone "Lync Service Administrator" role should be enough. Although I dont remember ever using anything other that GA, so maybe test with a single user first :)

Hi

 

Yes unfortunately you need Global Admin rights on your tenant. We questioned this with Microsoft in our meetings as we also felt that this was too much of an elevated credential. However, it seems that during the move, things get written to Azure AD not just SfB Online which is why the SfB Online Admin role is insufficient.

 

thanks