OneDrive for Business to Google Drive Migration Guide

Introduction

Welcome to the OneDrive for Business to Google Drive migration guide. This document will walk you through the environment preparation and MigrationWiz steps necessary to perform your migration. 

To discover what items are moved with MigrationWiz in this scenario, and which items will not be moved, see Moved Items. Note that these items will vary by source and destination, so check the proper environment listings carefully.

MigrationWiz is a migration tool, not a syncing tool. If changes are made at the source after migration, they will not sync to the destination, nor will changes made at the destination sync to the source. We do not have “live” monitoring of changes (as with a sync agent) and we cannot handle scenarios such as conflict resolution without user interaction.

MigrationWiz supports the capability to share migration projects across a Workgroup. When the Project Sharing feature is turned on, all Agents besides those who are Inactive can view all migration projects. For more information, visit Project Sharing in MigrationWiz.

We are not able to support migrations with 2-factor or multifactor authentication. 

Prepare the Source Environment

  1. Create a OneDrive for Business user account that will be used for the migration and give it main global administrator privileges or use the existing global administrator account that was set up at the time the Office 365 tenant was created. For more information see How do I create an administrator account in Office 365, and then use this during migration?Note: We highly recommend that you use an administrator account that isn’t one of the users being migrated. Otherwise, it can cause issues with missing shared permissions.
  2. Export the list of OneDrive for Business user accounts to a CSV file. This can be used when adding users on the Destination, and when adding users into your MigrationWiz project dashboard. For more information see View, Add, and Edit Customers' Users.
  3. Set up the app-based authentication in the Office 365 tenant. For specific instructions, see Sharepoint App-based Authentication.

Prepare the Destination Environment

Google Drive (Own Service Account) Endpoint 

This endpoint requires your tenant service account to be set up and Google APIs be enabled. Follow the steps below to set up your environment for this endpoint. 

Prerequisites:

  • Subscription to Google Cloud Platform.

  • Google Super Administrator account.

  • Ability to set up a service account on the G Suite tenant.

  • Service account must be set up before the MigrationWiz project is created.

 Step 1: Create a Google Project:

  1. Go to the Google Cloud Platform (GCP) Console and sign in as a super administrator. Choose one of the options below:

    • If you haven't used the Google Cloud Platform Console before, agree to the Terms of Service and click Create Project.

    • If you have used Google Cloud Platform Console before, at the top of the screen next to your most recent project name, click Down to open your projects list. Then, click New Project.

  2. Enter a project name and click Create.

 Step 2: Enable APIs for Service Account

  1. From the Google Cloud Platform Console, click Menu > APIs & Services > Library.

  2. Enable the following APIs by selecting the specific API and clicking Enable.
    Repeat for each API listed below:

    • Google Drive API

    • Admin SDK

Make sure that the respective services are enabled within the Google tenant. You can control services for your users using the instructions on this page: Control who can access G Suite and Google Services.

 Step 3: Create Customer Tenant Service Account

  1. From the Google Cloud Platform Console, click Menu > IAM & Admin > Service accounts.

  2. Click Create Service Account and enter a name.

  3. Click Create.

  4. Assign the role of Owner to the new Service Account by selecting Owner from the Role drop down menu.

  5. Click Done.

  6. You will now be returned to the "Service Accounts" page. 
  7. On ‘Service accounts' page, click vertical ellipsis under 'Actions’ column for the service account created above.
  8. Click + Add Key.

  9. Click Create New Key.

  10. Make sure that JSON is selected as "Key Type."

  11. Click Create.

  12. Click Close.
    Notes:

    • Make sure that you download the key as a JSON file and make a note of the name and location of the file. This JSON file will be used when setting up the migration endpoint in the Mailbox Migration project.

    • The JSON file must contain information in the following fields: “type”, “private key”, and “client email”. If these mandatory fields are empty the file upload during endpoint creation will fail.

Step 4: Setting the Scopes for the Migration

From the Google Cloud Platform Console:

    1. Click Menu
    2. Click IAM & Admin
    3. Click Service Accounts
    4. Find the service account that was set up in Step 3: Create Customer Tenant Account.
    5. Find the Unique ID field for that service account by clicking the Column Display Options button in the right upper corner above Actions and copy the ID number. This is the Client ID number that will be used in a later step.
      Note:
      • This field often needs to be added to the view. Click on the Column display options button and add a checkmark to Unique ID, then click OK.
      • This Client ID should be considered similar to Administrator account passwords and handled securely.
    6. You will now have one of two options, depending on if the Google UI has been updated in your tenant.

    Old Google Tenant:

    • Go to the G Suite admin page at google.com
    • Click on Security
    • Click on Advanced Settings
    • Click Manage API Client Access.

    OR If your account shows the latest UI updates from Google, as shown below:mceclip0.png

    • Go to the G Suite admin page at google.com
    • Click on Security
    • Click Advanced Settings
    • Under ‘Domain-wide delegation’, click Manage domain-wide delegation
    • On the Manage domain-wide delegation page, click Add new

     Once these steps are complete:

    1. In the Client ID field, paste the Unique ID copied above.
    2. In the OAuth scopes (comma-delimited) field, paste all scopes listed below:
      1. For source endpoint :
        https://www.googleapis.com/auth/admin.directory.group.readonly, https://www.googleapis.com/auth/admin.directory.user.readonly, https://www.googleapis.com/auth/drive.readonly
        OR

      2. For destination endpoint (must include read-write scopes):
        https://www.googleapis.com/auth/admin.directory.group, https://www.googleapis.com/auth/admin.directory.user, https://www.googleapis.com/auth/admin.directory.group.readonly, https://www.googleapis.com/auth/admin.directory.user.readonly, https://www.googleapis.com/auth/drive.readonly,
        https://www.googleapis.com/auth/drive

    3. Click Authorize.

     You should now see your specific Unique ID and the associate scopes listed.

 

MigrationWiz Steps

Create New Project

Google Drive (Own Service Account) Endpoint

To create a new migration project:

    1. Click the Go To My Projects button.
    2. Click the Create Project button.
    3. Click on the type of project that you wish to create. For this scenario, select Document. Document projects are used to migrate document drives from one cloud storage to another. Document migrations will maintain the folder hierarchy from the source to the destination.
    1. Click Next Step.
    2. Enter a Project name and select a Customer.
      Note: If you have not already added the customer into MSPComplete, you will need to click New to create the Customer. For steps on creating customers, see View, Add, and Edit Your Customers.
    3. Click Next Step.
    4. Select a Source Endpoint from the Endpoint dropdown menu or create a new endpoint. 
      Notes:
      • Click Endpoints > Add Endpoint > Enter endpoint name > For endpoint type, select Google Drive (Own Service Account).

      • Click Select File > Navigate to and select the JSON file that contains the Google Service Account key that was saved during the service account setup process.

      • Enter the Google admin account email address. Please note that this admin email should match the end user domain.

    5. Select a Destination Endpoint from the Endpoint dropdown menu or create a new one using the steps above. 
    6. Click Save and Go to Summary.
      Note: If setting up a Tenant to Tenant Coexistence mailbox project, check the box for Enable Tenant to Tenant Coexistence. Otherwise, leave that box unchecked.

Once the project is created:

  1. Add the accounts (also referred to as "items") that will be migrated to the project. For more information see How do I add items to my migration project?
  2. Set Project Advanced Options. For more information see What project Advanced Options are available?
    • Under Support/Support Options add:
      • InitializationTimeout=8 - This increases the initialization timeout window to eight hours. For more information see Cannot get folders from My Drive.
        Note: There are no spaces on either side of the "=" sign, and the entries are case-sensitive, so pay special attention to the capital letters in the commands above.
      • BitTitan has no limitations to the number of folders per migration. Any folder limits will be set by Microsoft.
  3. Run Verify Credentials. For more information see How do I verify credentials?
  4. Notify users that a migration is occurring. Send an email to all users telling them the time and date of the migration. During this time, they should not modify any documents in their OneDrive for Business accounts, because any modifications will not be included in the migration.
  5. Perform the migration using one of the following strategies:
    • Steps for a Full Migration pass:
      • Select the users > From the top navigation, click the Start button > From the drop-down list, select Full Migration > Click the Start Migration button. For more information see How do I start a migration?
    • Steps for a Pre-Stage Migration:
      • Pre-Stage pass: Select the users > Click the Start button from the top and select Pre-Stage Migration > Under the Migration Scheduling section, from the drop-down list, select 90 days ago > Click Start Migration. For more information see How do I start a migration?
      • Full (Delta) pass: Select the users > Click the Start button from the top, select Full Migration > Click Start Migration. For more information see How do I start a migration?
    • For small- to medium-sized migration projects that have less than 500 users, we recommend a Big Bang Migration strategy. This is a single, Full pass migration.
    • For large migration projects that have more than 500 users, we recommend a Pre-Stage Migration strategy. This is a multiple-pass migration.
  6. Click the pie chart icon in the MigrationWiz dashboard to receive an email containing all the project migration statistics. For more information see How do I request statistics for my migration project?

Post-Migration Step

To prevent users from inadvertently logging in and using their OneDrive for Business accounts, decommission the OneDrive for Business user accounts, or change their passwords.

Was this article helpful?
1 out of 1 found this helpful