Using App-based Authentication (Delegate Permissions)

BitTitan uses app-based authentication for SharePoint, OneDrive for Business, Microsoft 365 Groups (Documents) migrations, and Teams migrations. This provides greater security and reduces the potential of Microsoft throttling. It replaces the previous Microsoft 365 authentication, which has been subject to increased throttling by Microsoft. This app-based authentication method is specific for Microsoft 365 tenants. You must use a Global Administrator account to approve installing the app in the tenant,


This app must be added in both tenants (Source and Destination) to reduce the throttling and failures due to Microsoft throttling policy changes.

If this app is not added on both tenants, MigrationWiz will attempt to create a temporary substitute app in the tenants to be used for authentication. We do not recommend relying on this substitute app creation, as this behavior will only be a temporary transitional behavior within MigrationWiz. To avoid potential interruptions or failures in migrations, it is strongly recommended to set the app up in the tenants. The temporary substitute app is only created for:

  • SharePoint Online or OneDrive V1 as the source,

  • SharePoint Online, OneDrive for Business, or Teams (without versions and metadata) as destination.

The temporary substitute app is not created for any Microsoft environment with versions and metadata migration, including Teams, OneDrive for Business, or SharePoint Online.

Add the App to the tenant

Step 1:

Visit the following URL and sign in as the administrator user:

For Teams migrations

For Teams Government migrations

For SharePoint or OneDrive migrations

Do this for both Source and Destination tenants.

Step 2:

Authorize the App for both Source and Destination tenants. (Example for what each permission the MigrationWiz-SharePoint-Delegated app has access to is shown below)




Click on the Accept button.

Post Migration Steps

To remove the BitTitan Enterprise app, perform the following steps:

  1. Launch PowerShell.
  2. Connect PowerShell to Microsoft 365.
  3. Enter the command:


  4. Enter the admin credential in the prompt.
  5. Enter the command:

    Get-AzureADServicePrincipal -SearchString Migration

  6. Look for the ObjectId of the app you want to remove and enter the following command:

    Remove-AzureADServicePrincipal -objectId <the object id>

Was this article helpful?
4 out of 12 found this helpful