Google Drive Migration Steps - For Non-Own Service Account Migrations

The Google Drive (Own Service Account) connector launched in 2020 and requires the set up of a Google Service account. This significantly reduces the likelihood of the migration being throttled. This is the option we recommend for all Google Drive migrations.

The original Google Drive connector uses a BitTitan Google service account. Since the service account is shared, the likelihood of throttling is higher compared to the new connector. This option may be chosen if you do not wish to set up your own account. 

Most Google Drive migrations now use the Own Service Account option and the steps for that are included in our migration guides. However, some still prefer the original endpoint. If this is the case, follow the steps below for your Google Drive environment preparation in place of the steps to set up the Own Service Account.

The rest of the migration will follow the migration guide for your chosen migration. 

Source Setup

Use these steps if your source is Google Drive and you do not wish to use the Google Own Service Account option. The following steps increase your risk of throttling during the migration.

Enable OAuth

Enable OAuth 2.0 within your Google admin portal to grant MigrationWiz access to G Suite. This step will require a Google admin account. For guidance, see Enable access to G Suite using OAuth 2.0.

  • If you are migrating from multiple domains, repeat the steps for each domain.
  • Make sure there are no spaces before or after the scope entry, as they will cause the authorization to fail.
  • OAuth administrative credentials will not function properly with G Suite for Business Legacy free accounts, G Suite Legacy free accounts, or Google Apps Legacy free accounts. Unfortunately, migrating any Google Legacy free accounts is not supported

Manage client API access

Google currently has two admin page views. Select the appropriate set of steps below.

If you have the old UI:

  1. Go to the G Suite admin page at admin.google.com 
  2. Click on Security
  3. Click Advanced Settings
  4. Click Manage API Client Access

OR

If your account shows the latest UI updates from Google:

  1. Go to the G Suite admin page at admin.google.com 
  2. Click on Security
  3. Click API Controls
  4. Under ‘Domain-wide delegation’, click Manage domain-wide delegation 
  5. On the Manage domain-wide delegation page, click Add new

 Once these steps are complete:

  1. Enter 113321175602709078332 into the Client ID field. 
  2. Enter the following groups of scopes into the OAuth Scopes (comma-delimited) field. Note that these scopes are for the source only. If setting this up for Google Drive as the destination, use the scopes under For destination endpoint (must include read-write scopes) found below instead.

    • G Suite as the Source (read-only scopes):

For source endpoint:
https://www.googleapis.com/auth/admin.directory.group.readonly, https://www.googleapis.com/auth/admin.directory.user.readonly, https://www.googleapis.com/auth/drive.readonly

  1. Click Authorize.
  2. The client name is 113321175602709078332 (make sure there are no leading or trailing spaces, as this may cause the error "URL ends with an invalid top-level domain name."). This will grant BitTitan products access to the appropriate scopes.

For destination endpoint (must include read-write scopes):
https://www.googleapis.com/auth/admin.directory.group, https://www.googleapis.com/auth/admin.directory.user, https://www.googleapis.com/auth/admin.directory.group.readonly, https://www.googleapis.com/auth/admin.directory.user.readonly, https://www.googleapis.com/auth/drive.readonly,
https://www.googleapis.com/auth/drive

More than one domain?

If you are migrating from multiple domains, repeat these steps for each domain.

Export mailboxes to CSV file(s)

From the Google Admin portal:

  1. Click Users
  2. Click ⁝ (3 vertical dots) 
  3. Download Users
  4. Download All Users
  5. Click OK 
  6. Save

Destination Setup

Use these steps if your destination is Google Drive and you do not wish to use the Google Own Service Account option. The following steps increase your risk of throttling during the migration.

  1. Grant MigrationWiz OAuth2.0 access to authenticate to Google Drive. This step will require a Google admin account. For guidance, see Enable access to G Suite using OAuth 2.0.
  2. Add users to Google Drive. Instructions are located here

Create Project

Use these steps if your source is Google Drive and you do not wish to use the Google Own Service Account option. The following steps increase your risk of throttling during the migration.

  1. Click the Go To My Projects
  2. Click the Create Project
  3. Click on the type of project that you wish to create. For this scenario, select Document projects are used to migrate document drives from one cloud storage to another. Document migrations will maintain the folder hierarchy from the source to the destination.
  4. Click Next Step.
  5. Enter a Project name and select a Customer.
    If you have not already added the customer into MSPComplete, you will need to click New to create the Customer. For steps on creating customers, see View, Add, and Edit Your Customers.
  6. Click Next Step.
  7. Select a Source Endpoint from the Endpoint dropdown menu or create a new endpoint. 
    1. Click Endpoints
    2. Add Endpoint
    3. Enter endpoint name
    4. For endpoint type, select Google Drive.
    5. Enter the Google super admin account email address and domain name in the appropriate fields.
    6. Both the source and destination domains will need to be listed in the endpoint for the migration to be able to connect properly.
    7. Both the source and destination domains will need to be listed in the endpoint for the migration to be able to connect properly.
  8. Select a Destination Endpoint from the Endpoint dropdown menu or create a new one using the steps above. 
  9. Click Save and Go to Summary.

From here, refer back to the migration guide for your specific migration.

Was this article helpful?
0 out of 1 found this helpful