Symptoms
You get the following error after your migration:
The object X could not be migrated. This can happen when an organisation restrict the access to objects with labels or Conditional Access policies.
Details
This error occurs when ShareGate Migrate attempts to download files and a conditional access policy blocks the API request, resulting in SharePoint returning the error.
To resolve the issue, you will need to identify the conditional access policy or access control for unmanaged devices that blocks ShareGate Migrate from downloading the files and update it to allow access for the account used for your migration.
You may need to contact a global admin if you don't have access. See the steps below:
Locate the conditional access policy
In Entra ID, review your conditional access policies. Look for policies that use any of the following conditions:
Device state (for example, Hybrid Entra ID joined or compliant devices)
Session controls (app-enforced restrictions)
These policies often block access for unmanaged devices, which prevents ShareGate Migrate from downloading content.
You can edit the identified conditional access policy and exclude the service account used to authenticate in ShareGate Migrate.
This allows the migration to run without device compliance checks for that account.
Update unmanaged devices' access
If your environment uses SharePoint unmanaged device controls, set the policy to allow full access for the account performing the migration.
In the SharePoint admin center, go to:
Policies > Access control > Unmanaged devices
Configure the unmanaged devices setting to Allow full access for the migration scenario.
