Symptom
You try to change the copy options for your Sensitivity labels for your migration, and you find the options are greyed out with the following warning:
To map sensitivity labels, a global admin’s consent to additional permissions may be needed, or you may need to connect using a different method.
Details
This issue occurs because ShareGate Migrate needs an application token with specific Microsoft Graph API permissions to retrieve and map sensitivity labels, likely caused by one of the following:
The required permissions have not been granted (consented) by a Microsoft 365 global admin or have been revoked.
You’re using Browser Authentication with Single Sign On (SSO) or Other User authentication with Multi-Factor Authentication (MFA), which does not support application tokens.
Solution
Start with your connection method.
Use Browser authentication (without SSO) or Other user (without MFA). These methods support application token retrieval.
If that doesn't help, ensure the necessary Microsoft 365 permissions have been consented to.
A Microsoft 365 global admin can use this link to grant ShareGate Migrate the necessary permissions for your tenant:
Even if permissions for ShareGate Migrate were already consented to, you might need to re-consent because new permissions were added to support sensitivity labels.
For more information about Microsoft permissions in ShareGate Migrate, see What is the Azure ShareGate migration tool app?