ShareGate apps can connect to your Microsoft 365, Google Workspace, Box.com, and file-sharing environments on behalf of a signed-in user.

While ShareGate does not expand end-users' capabilities in your environments, you may still want to limit access to your ShareGate licenses, reports, assessments, and other resources.

Your ShareGate account serves as your primary connection to ShareGate apps and services and is required to use them.

Accounts can be created on ShareGate's Login page or through a workspace invitation email. A ShareGate workspace admin must invite members to their workspace to grant them access to the ShareGate subscriptions they have.

When inviting someone to join a workspace to gain access to ShareGate Migrate, use their common business email address.

It will be easier for them to create and access their ShareGate account, and it will not prevent them from using a service account to connect to their Microsoft 365 tenant with ShareGate after they sign in to access Protect or activate ShareGate Migrate.

ShareGate workspace is the hub for your ShareGate subscription.

A workspace is automatically created the moment you register for a trial and create your account, or when you purchase a ShareGate subscription.

There are two roles available to ShareGate workspace members that can be assigned to an unlimited number of users. These roles are:

These members have access to the ShareGate products assigned to them and can use ShareGate Migrate activations from your activation pool. They cannot modify workspace settings, including the subscription, or change another member's access.

To manage your workspace's members, including revoking access to ShareGate Migrate and managing their activations, see ShareGate workspace admin settings.

When starting ShareGate Migrate, a user must sign in once with a ShareGate account that has access to the app and at least one available ShareGate Migrate activation in the workspaces activation pool.

ShareGate Migrate also requires the consent of a Global or privileged role admin to various sets of Microsoft 365 permissions to use certain features and improve performance while reducing limitations.

ShareGate Protect requires that you sign in with a ShareGate account that has been granted access to the app.

The migration assessment is currently only available to select partners.

Both features require a global or privileged role admin to consent to a set of Microsoft 365 permissions and to assign a special Assessor role in their Microsoft 365 admin center.

You can grant and revoke a user's access to ShareGate Protect on the Members page in ShareGate Home.

You can also remove the assessor role from a user's Microsoft 365 account to keep them from using these features.

Using ShareGate Migrate and ShareGate Protect, a global admin can consent to various sets of Microsoft permissions for our apps to integrate with Microsoft 365.

When an admin consents to a set of Microsoft 365 permissions, an enterprise app is installed in Microsoft Entra, and that app is not removed automatically when you stop using ShareGate.

While we don't recommend revoking consent to block your users as a primary means to do so:

You can delete the Entra enterprise apps to revoke consent to these permissions at any time.

To learn about Microsoft 365 permissions and their associated enterprise apps, see the Required Microsoft 365 permission scopes in ShareGate section.