ShareGate requires different permission sets for a number of its features and applications. This article explains how a global or privileged role admin can consent to these permissions, allowing ShareGate users to benefit from all the features they need from our apps.
For an overview of these Microsoft 365 permissions for ShareGate, see ShareGate's Enterprise applications in Microsoft Entra before you start.
You can also review the required permissions in the Microsoft 365 permission sets required for ShareGate article.
Note: You can revoke these permissions at any time after you have given your consent.
Prerequisite
You must have global admin or privileged role admin permissions on the Microsoft 365 tenant to consent to these permission sets.
How-to
If you're running ShareGate operations with a global or privileged role admin account, you can consent to the required permission sets you need when you sign in to your tenant through a ShareGate feature.
If you're setting up the necessary permissions on behalf of ShareGate users who lack sufficient permissions to consent to these sets themselves, you can follow the guides below to grant consent for all the required features through Microsoft 365 sign-in links.
Note: A user with insufficient Microsoft 365 access may receive a link that they can send to you to consent to a specific Microsoft 365 permission set they require. That link will guide you through the consent and access process for that set only.
ShareGate Migrate
ShareGate Migrate has 4 permission sets you can consent to. To consent to one or multiple ShareGate Migrate sets:
Click on the link to the Microsoft sign-in page for the permission set you want to consent to:
Sign in with your Global or privileged role admin account.
Consent to the permission set.
Note: The ShareGate migration assessment permission sets can only be consented to when you sign in to your tenant with a global or privileged role admin account.
The migration assessment is currently only available to select partners.
ShareGate Protect
ShareGate Protect has 4 permission sets you can consent to. To consent to one or multiple ShareGate Protect sets:
Click on the link to the Microsoft sign-in page for the permission set you want to consent to:
Sign in with your Global or privileged role admin account.
Consent to the permission set.
Once consented, users will need an Assessor role in Entra ID to access ShareGate Protect. To grant that role, see Assign the Assessor role in Entra ID.
Note: When you consent to ShareGate Protect's permission sets, a crawl of your tenant is initiated to gather the necessary information for your assessment and remediation actions.
Troubleshooting
If you experience an issue consenting to a permission set, see Troubleshooting permission set consent issues.