Administrator Mode

Administrator mode is useful when you want to migrate multiple users in your domain without connecting to each one of those accounts manually; it lets you see and migrate all of your user's files in your domain.

Index

• What is administrator mode?
• How-to
  • Permissions needed for Administrator Mode
• Setup
  • Obtain Super Admin permission
  • Delegate domain-wide authority

What is administrator mode?

The administrator mode is a migration mode offered in Import from Google Drive.

Note: You must be a Super Admin in your Google Apps domain in order to use the administrator mode. If you are not, you will see an error message when you connect.

How-to

1. Click Copy in the menu.
2. Under Import external content, click Import from Google Drive.
3. Type in your Google email.
4. Check Connect as admin.
5. Click Connect.
6. Follow the instructions in-app to complete your migration. 

Permissions needed for Administrator Mode

View users on your domain (read-only): the ShareGate migration tool needs to list all of your domain's users to list them in the explorer and so you can create user mappings.

View groups on your domain (read-only): the ShareGate migration tool needs to list your groups so you can create group mappings.

View domains related to your customers (read-only): the ShareGate migration tool needs to know what domains are associated with your Google Apps account to check if you are allowed to create credentials for users that have a different domain in their email address.

Note: When you log in as an administrator, the explorer differs from the normal Google Drive explorer. The root folder will be the domain from which you logged in. This may or may not be your primary domain associated with your Google Apps account.

Setup

Administrator mode might take an initial setup for it to work properly. 

Obtain Super Admin permission

Ensure you have the Super Admin permission in your Google Apps admin console. You may have to ask another Super Admin for that permission if you don't have it.

Here is an article from Google documenting the process of adding admin roles to a user.

Delegate domain-wide authority

Delegate domain-wide authority to the ShareGate migration tool's service account using the following instructions provided by Google:

1. From your Google Workspace domain's Admin console, go to Main menu -> Security -> API controls.
2. In the Domain wide delegation pane, select Manage Domain Wide Delegation.
3. Click Add new.
4. In the Client ID field, enter the following:
   

   863730239928-qlbiuhv19ak18hi56mk2mp61ca9s5co3.apps.googleusercontent.com

5. In the OAuth Scopes field, enter the following:
   

   https://www.googleapis.com/auth/drive

6. Click Authorize. 

At any time you may remove the ShareGate migration tool's access to your data from the Manage Domain Wide Delegation screen. Click the client name and select Remove.