Before you can migrate mailboxes between Microsoft 365 tenants, users need to exist in the destination tenant.
Copy identities copies users and groups from Entra ID to complete identity preparation as part of your migration projects.
Note: Copy identities is a public beta.
Some identity types and properties are not supported. For details, see Copy identities limitations.
Prerequisites
You have a ShareGate Migrate Pro or ShareGate Migrate Enterprise subscription.
You have global admin permissions in your Microsoft 365 source and destination.
Required Microsoft 365 permissions
You must once consent to a set of Microsoft 365 permissions on your tenants before using Copy identities.
You'll be prompted to consent to these permissions the first time you sign in with your Global admin account.
To learn about the required permissions for identity migrations, see Microsoft 365 permission scopes required for ShareGate.
How to copy identities
Select Copy from the sidebar menu.
Select the Copy identities tab.
Click Copy identities.
Click the tenant selection box. It will display No connections if no tenants are connected via Copy identities.
Select a source tenant or click +Add connection to connect to a new tenant.
If this is the first time connecting to the tenant with a mailbox migration feature, you will get prompted to consent to a Microsoft 365 permission scope as described in the Permissions consent section above.
You can click the refresh icon to update your users.
Place a check mark next to each source identity you want to migrate.
You can use the search bar to find specific identities.
You can click on a column header to sort your identities based on that column.
You can select all your listed mailboxes with the check box in the Mailbox column header.
Click Continue to select destination.
Identity mappings
Copy identities handles mappings automatically between users and groups.
How users and groups are matched
ShareGate Migrate looks for exact matches on specific properties:
Users are matched with the User Principal Name (UPN).
Groups are matched with the Mail nickname.
When no match is found
The identity's status changes to Will be created on the mappings screen, and ShareGate will provision a new identity in the destination.
When multiple candidates are found
When two destination identities match the same source, it is treated as a conflict, and the identity receives a Needs review error status. ShareGate Migrate won't automatically pick one.
In these cases, you can resolve the conflict directly in Entra ID or remove the identity from the migration list.
Copy report
As the copy completes, ShareGate generates a copy report that summarizes the results of your identity migration.
If you leave the identity migration screen, you can always find the copy report in the Tasks screen.