Skip to main content

Manage access to ShareGate

Updated this week

ShareGate apps can connect to your Microsoft 365, Google Workspace, Box.com, and file-sharing environments on behalf of a signed-in user.

While ShareGate does not expand end-users' capabilities in your environments, you may still want to limit access to your ShareGate licenses, reports, assessments, and other resources.

ShareGate account

Your ShareGate account serves as your primary connection to ShareGate apps and services.

Your ShareGate account can be associated with multiple ShareGate Workspaces, where you can be an owner or contributor.

An account is required to use ShareGate products and services.

Accounts can be created on ShareGate's Login page or through a workspace invitation email. An owner must invite members to their workspace to grant them access to our products.

ShareGate workspace

ShareGate workspace is the hub for ShareGate's account-based licensing.

A workspace is automatically created the moment you register for a trial and create your account, or when you purchase a ShareGate subscription.

Only workspace owners can manage the workspace's members, subscription, and settings.

Note: Starting on November 1, 2025, ShareGate workspaces replace license keys.

Roles and access

There are two roles available to ShareGate workspace members that can be assigned to an unlimited number of users. These roles are:

Workspace owner

  • Owners have access to manage products and activations.

  • Owners have complete control over settings and subscriptions.

  • Owners can invite new members as owners or contributors.

  • Every workspace needs at least one owner.

Note: With the launch of the new workspace account-based licensing on November 1, 2025, all existing ShareGate users were converted to owners. This technically didn't change the access level these users had before this update. They could already access and update license assignments, as well as manage other ShareGate accounts. An owner can change the access level of other members, including other owners.

Workspace contributor

  • These members have access to products and activations allocated to them. They cannot modify workspace settings, including the subscription, or change another member's access.

Access management

ShareGate Home

ShareGate Home is the first place to go when you want to grant or revoke access for a ShareGate user in your workspace.

With a ShareGate workspace owner account, you can manage who has access to your ShareGate products and your ShareGate Migrate activations on the Members page in ShareGate Home.

You can also change a member's role, grant or revoke access to any ShareGate product, assign ShareGate Migrate activations, and remove a member from your workspace.

To learn how to change your member settings, see Manage your account, workspace, members, and subscription.

ShareGate Migrate

When starting ShareGate Migrate, a user must sign in once with a ShareGate account that has access to the app and at least one available Migrate activation assigned to their account.

ShareGate Migrate also requires the consent of a Global or privileged role admin to various sets of Microsoft 365 permissions to use certain features and improve performance while reducing limitations.

Migrate activations

An activation represents a working installation of ShareGate Migrate for a specific Microsoft user on a specific machine.

ShareGate subscriptions can have multiple ShareGate Migrate activations, and a ShareGate user can have more than one activation assigned to them.

For example, if you have 5 Migrate activations included with your subscription, you can have 5 different Microsoft users running ShareGate on their individual computers, or you can have a single one running ShareGate Migrate on 5 different workstations or servers.

A ShareGate workspace owner can manage access to Migrate and license activation assignments on the Members page in ShareGate Home.

You can also deactivate an in-use activation directly in ShareGate Migrate's settings, in the Workspace screen.

If you have multiple activations assigned to your ShareGate account, you can deactivate an activation in the app yourself to use it when you sign in to ShareGate Migrate on another workstation.

If your workstation is in an offline environment, see Offline Migrate activations.

ShareGate Protect and migration assessment

ShareGate Protect requires that you sign in with a ShareGate account that has been granted access to the app.

The migration assessment is currently only available to a select few partners.

Both features also require a global or privileged role admin to consent to a set of Microsoft 365 permissions and a special Assessor role that they can assign in their Microsoft 365 admin center.

You can grant and revoke a user's access to ShareGate Protect on the Members page in ShareGate Home.

You can also remove the assessor role from a user's Microsoft 365 account to keep them from using these features.

Admin consent to Microsoft 365 permissions for ShareGate

Using ShareGate Migrate and ShareGate Protect, a global admin can consent to various sets of Microsoft permissions for our apps to integrate with Microsoft 365.

When an admin consents to a set of Microsoft 365 permissions, an enterprise app is installed in Microsoft Entra, and that app is not removed automatically when you stop using ShareGate.

While we don't recommend revoking consent to block your users as a primary means to do so:

  • Deleting the associated enterprise apps for ShareGate Protect and the migration assessment in Entra ID will prevent any user from using these features.

  • Many features can still be used in ShareGate Migrate without app consent, so removing the associated Enterprise apps can only prevent your users from running a few operations and can increase throttling.

You can delete the Entra enterprise apps to revoke consent to these permissions at any time.

To learn about Microsoft 365 permissions and their associated enterprise apps, see the Required Microsoft 365 permission scopes in ShareGate section.

Did this answer your question?