Google Drive to OneDrive for Business Migration Guide

Introduction

This is the complete onboarding task flow for migrating folders and documents from Google Drive to OneDrive for Business.

This migration guide contains the necessary steps to perform the actual migration, but there are many steps to preparing for migration. If this is your first time performing a migration, we have created a Migration Planning & Strategy Guide to walk you through planning, set-up, and general migration best practices.

To discover what items are moved with MigrationWiz in this scenario, and which items will not be moved, see Moved Items. Note that these items will vary by source and destination, so check the proper environment listings carefully.

MigrationWiz is a migration tool, not a syncing tool. If changes are made at the source after migration, they will not sync to the destination, nor will changes made at the destination sync to the source. We do not have “live” monitoring of changes (as with a sync agent) and we cannot handle scenarios such as conflict resolution without user interaction.

Note that OneDrive data may not be accessible for a few days after migration, due to OneDrive's crawling and indexing process. We suggest having your users log in immediately after migration, but warn them that their data may not be available immediately. For this reason, it may be best to complete the migration on a Friday so the indexing can happen over the weekend.

The Source must be a paid version of Google Drive. Free Google Drive accounts are not a supported Source.

Items and folders in "Shared with Me" will not be migrated.  Only items in "My Drive" will be migrated. To migrate "Shared with Me" items, they must be added to "My Drive".

The Destination must be OneDrive for Business, not the personal version of OneDrive.

Note: Due to versioning, storage usage on OneDrive may be increased when migrating with permissions.

To see what items are included in the migration, see Which Items Are and Are Not Migrated by MigrationWiz?

MigrationWiz is a migration solution (not a synchronization solution) and will NOT propagate updates, deletes, or moves of the items previously migrated in the first migration pass because we do not have “live” monitoring of changes (as with a sync agent) and we cannot handle scenarios such as conflict resolution without user interaction.

MigrationWiz supports the capability to share migration projects across a Workgroup. When the Project Sharing feature is turned on, all Agents besides those who are Inactive can view all migrations projects. For more information, visit Project Sharing in MigrationWiz.

Note: We no longer support migrations to or from GoDaddy-hosted OneDrive.

 

Prepare Azure Environment

Note: If using Microsoft provided Azure storage, you can skip this section.

  1. Estimate Azure storage costs. This step is optional but is useful in order to provide the customer with upfront storage costs ahead of time. For more information, see Estimate Azure Storage costs for migrations.
  2. Buy an Azure subscription (or use the free one-month trial, and be aware that this option is only viable if you are performing a very small migration). For more information, see How do I buy an Azure subscription?
  3. See How do I create an Azure Storage Account? to create your storage account. You will need to set up a STORAGE (General Purpose v1 or v2) account rather than a storage blob. Take note of the storage account name and the primary access key. (In Azure, from the storage screen, click Manage Access Keys at the bottom of the screen.) These need to be entered into the MigrationWiz migration project when specifying the Destination settings. We recommend that you create your Azure storage account in the same Microsoft data center as the Destination Office 365 tenant. There is no need to create any Azure containers for this migration.
    Note: The access key information that is needed are these:
    • -accesskey – This is the Storage account name for the Blob – example “accountname”
    • -secretkey - This is the access key for the Storage account – example “W1RrDfkPNkfYfdVqizMNJjn5mXchwMP5uYBY8MsMqWTA7EubG911+4fZlki0Gag==”

 

Prepare the Source Environment

  1. Google Drive (Own Service Account) Endpoint 

    This endpoint requires your tenant service account to be set up and Google APIs be enabled. Follow the steps below to set up your environment for this endpoint. 

    Prerequisites:

    • Subscription to Google Cloud Platform.

    • Google Super Administrator account.

    • Ability to set up a service account on the G Suite tenant.

    • Service account must be set up before the MigrationWiz project is created.

     Step 1: Create a Google Project:

    1. Go to the Google Cloud Platform (GCP) Console and sign in as a super administrator. Choose one of the options below:

      • If you haven't used the Google Cloud Platform Console before, agree to the Terms of Service and click Create Project.

      • If you have used Google Cloud Platform Console before, at the top of the screen next to your most recent project name, click Down to open your projects list. Then, click New Project.

    2. Enter a project name and click Create.

     Step 2: Enable APIs for Service Account

    1. From the Google Cloud Platform Console, click Menu > APIs & Services > Library.

    2. Enable the following APIs by selecting the specific API and clicking Enable.
      Repeat for each API listed below:

      • Google Drive API

      • Admin SDK

    Make sure that the respective services are enabled within the Google tenant. You can control services for your users using the instructions on this page: Control who can access G Suite and Google Services.

     Step 3: Create Customer Tenant Service Account

    1. From the Google Cloud Platform Console, click Menu (Google_Menu.png) > IAM & Admin > Service accounts.
    2. Click Create Service Account and enter a name.
    3. Click Create
    4. Assign the role of Owner to the new Service Account by selecting Owner from the Role Dropdown menu.
    5. Click Continue
    6. Click Done
    7. Click the three dots to the right of the service account and select Create Key.
    8. Make sure that JSON is selected and click Create.
      • Make sure that you download the key as a JSON file and make a note of the name and location of the file. This JSON file will be used when setting up the migration endpoint in the Mailbox Migration project.
      • The JSON file must contain information in the following fields: “type”, “private key”, and “client email”. If these mandatory fields are empty the file upload during endpoint creation will fail.
    9. Click Close
  2. Step 4: Setting the Scopes for the Migration

      1. Click Menu
      2. Click IAM & Admin
      3. Click Service Accounts
      4. Find the service account that was set up in Step 3: Create Customer Tenant Account.
      5. Find the Unique ID field for that service account by clicking the Column Display Options button in the right upper corner above Actions and copy the ID number. This is the Client ID number that will be used in a later step.
        Note:
        • This field often needs to be added to the view. Click on the Column display options button and add a checkmark to Unique ID, then click OK.
        • This Client ID should be considered similar to Administrator account passwords and handled securely.
      6. You will now have one of two options, depending on if the Google UI has been updated in your tenant.

      Old Google Tenant:

      • Go to the G Suite admin page at google.com
      • Click on Security
      • Click on Advanced Settings
      • Click Manage API Client Access.

      OR If your account shows the latest UI updates from Google, as shown below:New_Google_Admin_APP_Access_Control.JPG

      • Go to the G Suite admin page at google.com
      • Click on Security
      • Click Advanced Settings
      • Under ‘Domain-wide delegation’, click Manage domain-wide delegation
      • On the Manage domain-wide delegation page, click Add new

       Once these steps are complete:

      1. In the Client ID field, paste the Unique ID copied above.
      2. In the OAuth scopes (comma-delimited) field, paste all scopes listed below:
        1. For source endpoint :
          https://www.googleapis.com/auth/admin.directory.group.readonly, https://www.googleapis.com/auth/admin.directory.user.readonly, https://www.googleapis.com/auth/drive.readonly
          OR
        2. For destination endpoint (must include read-write scopes):
          https://www.googleapis.com/auth/admin.directory.group, https://www.googleapis.com/auth/admin.directory.user, https://www.googleapis.com/auth/admin.directory.group.readonly, https://www.googleapis.com/auth/admin.directory.user.readonly, https://www.googleapis.com/auth/drive.readonly,
          https://www.googleapis.com/auth/drive
      3. Click Authorize.

       You should now see your specific Unique ID and the associate scopes listed.

Export mailboxes to CSV file(s). From the Google Admin portal > Click Users > Click ⁝ (3 vertical dots) > Download Users > Download All Users > Click OK > Click Save.

Important, the v2 connectors do not support invalid XML characters.  The list of users will need to be checked for these characters and users with invalid characters will either need to be renamed or migrated using a v1 connection instead of v2.
Note: The invalid characters are: < > " ' &

 

Prepare the Destination Environment

  1. Create an administrator account in Office 365 to be used for migration, or use the global admin account for the tenant. Read the How do I create an administrator account in Office 365, and then use this during migration? for more information.
    Important: The admin account must have a full license assigned to it, in order to be able to provision OneDrive for Business profiles for each user during the migration process. Read the Personal Site is not instantiated = PermissionsUserNotLicensed article for more information.
  2. Assign an Office 365 license that contains OneDrive for Business to the admin account that will be used for migration.
    • If users have never used OneDrive before, MigrationWiz will provision OneDrive (SharePoint) profiles for each user being migrated, using the admin account credentials that are entered in the MSPComplete Destination endpoint. However, it does not create the user account; the user account needs to have already been created.
    • MigrationWiz cannot provision a OneDrive profile for blocked users. If a user is blocked, there will be a provisioning or access error.
  3. Set up accounts on Office 365 and assign licenses. These can be created in several ways:
    • Manually, one at a time.
    • By bulk import, via CSV file. Read the Add several users at the same time to Office 365 article from Microsoft for more information.
      Note: You can use the CSV file that was created under Step 3 of the Prepare the Source Environment section of this guide.
    • By PowerShell script. Read the Create user accounts with Office 365 PowerShell article from Microsoft for more information.
      Important:
      If you are migrating permissions, the part of the usernames before the "@" sign on Office 365 must match the part of the username on Google Drive before the "@" sign, e.g., john.smith@domain1.com on Google Drive must follow the same format before the @ sign on Office 365, and so must also equal "john.smith" on Office 365. The domain name, however, can be different. Read the How are shared documents handled when migrating documents? article for more information.
  4. Set up groups on Office 365. If permissions were assigned to groups on Google Drive, and you want these to be migrated, the group names on Office 365 must match the group names on Google Drive. Read the How are shared documents handled when migrating documents? article for more information.
  5. Set up the app-based authentication in the Office 365 tenant. For specific instructions, see Sharepoint App-based Authentication.

 

MigrationWiz Steps

Create New Project

Google Drive (Own Service Account) Endpoint

To create a new migration project:

    1. Click the Go To My Projects button.
    2. Click the Create Project button.
    3. Click on the type of project that you wish to create. For this scenario, select Document. Document projects are used to migrate document drives from one cloud storage to another. Document migrations will maintain the folder hierarchy from the source to the destination.
    1. Click Next Step.
    2. Enter a Project name and select a Customer.
      Note: If you have not already added the customer into MSPComplete, you will need to click New to create the Customer. For steps on creating customers, see View, Add, and Edit Your Customers.
    3. Click Next Step.
    4. Select a Source Endpoint from the Endpoint dropdown menu or create a new endpoint. 
      Notes:
      • Click Endpoints > Add Endpoint > Enter endpoint name > For endpoint type, select Google Drive (Own Service Account) for the source and OneDrive for Business for the destination. 

      • Click Select File > Navigate to and select the JSON file that contains the Google Service Account key that was saved during the service account setup process.

      • Enter the Google admin account email address. Please note that this admin email should match the end user domain.

    5. Select OneDrive for Business Destination Endpoint from the Endpoint dropdown menu or create a new one. 
    6. Click Save and Go to Summary.
      Note: If setting up a Tenant to Tenant Coexistence mailbox project, check the box for Enable Tenant to Tenant Coexistence. Otherwise, leave that box unchecked.

Once the project is created:

  1. Add the accounts (also referred to as "items") that will be migrated to the project.
    Note: If you are using the Bulk Add option, only the Source and Destination columns need to be filled in. You can use the CSV file that was created under Step 3 of the Prepare the Source Environment section of this guide. Read the How do I add items to my migration project? article for more information.
  2. Set the Project Advanced Options. Read the What project Advanced Options are available? article for more information. 
    • Under Support/Support Options add:
      • InitializationTimeout=8 - This increases the initialization timeout window to eight hours. 
      • IncreasePathLengthLimit=1 - Use this Advanced Option in MigrationWiz to enable the use of 400 characters for the file path name. R
      • RemoveExistingPermissionsWhenUnspecified=1 article for more information.
      • ShrinkFoldersMaxLength=200 (optional, but recommended) Read the How do I auto shrink the folder path when migrating to OneDrive for Business or SharePoint Online? article for more information.
      • DocumentBrowsingMode=Moderate (optional, but recommended) Read the How does Google Drive to Microsoft OneDrive for Business with Moderate Mode work? article for more information.
      • RenameConflictingFiles=1 (optional, but recommended). Read the Error: Cannot create 'filename' because another file exists with the same name article for more information.
      • If the migration project is a long-term project, it may be necessary to add an additional Advanced Option for use during the final migration pass to verify the contents of previously migrated items. For more information, contact Support.
        Note: There are no spaces on either side of the "=" sign, and the entries are case-sensitive, so pay special attention to the capital letters in the commands detailed above.
      • MapPermissionEmailByPairsInProject=1Permissions generally cannot be migrated unless the prefix of the mail address is the same in the source and the destination. However, choosing Support Option MapPermissionEmailByPairsInProject=1 will allow permissions to be migrated without identical mail addresses. Mandatory: User must input all users in the organization into a single project. Users cannot be split into multiple projects, nor can there be only a single user in a group for this option. 
    • Set the Advanced Option to send a notification to end users after the migration pass completes. Notifications are not mandatory.
      • Notifications > Send successful migration and notification to: > Source email address (if users are still using G Suite Gmail) or Destination email address (if users are already using Office 365).
      • Customize notification email. Checkmark the Customize "successful migration" email box. Add your own customization text and company name to this email.
        Note: Notifications are not mandatory for a successful migration.  Notifications should only be set up before the final pass. If performing a single, Full pass, set this up now. If you are following a Pre-Stage migration strategy, only set this up prior to the final Full (Delta) pass.
  3. Run Verify Credentials. Read the How do I verify credentials? article for more information.
  4. Run an assessment to calculate the number of licenses required for your migration. Read the How does the MigrationWiz Assessment tool work? article for more information.
  5. Notify users that a migration is occurring. Send email to all users telling them the time and date of the migration. During this time, they should not modify any documents in their Google Drive accounts, because any modifications will not be included in the migration.
  6. Perform the migration, using one of the following strategies:
    • Full Migration strategy. For more information, see How do I start a migration?
      • For small migration projects that are less than 50 users, we recommend a Full Migration strategy. This is a single, full-pass migration.
    • Pre-Stage Migration Strategy:
      • Pre-Stage pass. For more information, see How do I start a migration?
      • Full (Delta) pass. For more information, see How do I start a migration?
      • For large migration projects that are more than 50 users, we recommend Pre-Stage Migration strategy. This is a multiple-pass migration.
  7. Click the pie chart icon in the MigrationWiz dashboard to receive an email containing all the project migration statistics. Read the How do I request statistics for my migration project? article for more information.

 

Post-Migration Steps

  1. To prevent users from inadvertently logging in and using their Google Drive accounts, decommission the Google Drive user accounts, or change their passwords.
  2. Notify users once the migration has completed.
    Note: If you set the MigrationWiz Advanced Option for Notifications, they will receive an email upon migration completion. Assist them with setting up access to their OneDrive for Business accounts, and setting up their synchronization settings.
  3. Provide training on OneDrive for Business.
  4. Delete all the Azure containers used for this migration. This will prevent incurring post-migration Azure costs for these containers. Be careful to only delete the containers created for this migration.
Was this article helpful?
2 out of 2 found this helpful