Audience
Any user of the Migration App.
How It Works
Migration App translates NTFS permissions to Egnyte during the Permissions Migration command in a three-step process.
- It extracts the permissions from the Source.
- It maps those permissions to what they should look like at the Egnyte side.
- Finally, it applies permissions to the files on Egnyte.
Note that during Steps 1 and 2, no information is provided to the User Interface. So until the system begins Step 3, nothing will display on the Migration Dashboard.
For a dataset of approximately 4 million objects, the estimated extraction time for permissions is 1.5 hours, and memory consumption is around 100 MB. The entire Permissions Migration can take longer than the original Data Migration, so plan accordingly.
Considerations
- Before migrating permissions, it's ideal if both users and groups have already been created on the Egnyte platform, although it is possible to migrate empty groups.
- Users can also migrate Azure AD users and group permissions using this tool.
- Migration App migrates permissions for folders. Files inherit the permissions of their parent folder.
- Permissions Migration is an all-or-nothing command, which means it doesn't do "True-Ups." Egnyte recommends running Permissions migration at the very end of a Migration Job, right before cutting over all the users from using the Source to using Egnyte.
- The first two steps can take a considerable amount of time, and no information is available to be displayed on the User Interface until they are completed. This can be somewhat confusing, since other commands in Migration App, such as Scan, Sanitize and Migrate Data, provide both stats and a visual progress bar that corresponds to the status of the command.
- Once permissions are scanned and extracted from the source and mapped to Egnyte (the first two steps), they are then applied at a rate of one folder per second, regardless of the number of permissions aligned with each folder.
-
When running Permissions Simulation or Permissions Migration, if the folder path names are very long, the users may see the error directory not be found on source. This means those paths have a path length more than 256 characters. In such cases, there are two solutions:
-
Change the default path length by changing the registry key, refer to Microsoft’s documentation here.
OR -
Change the folder structure so that the path length comes under 256 characters.
- Run True-up to upload the data according to the new folder structure.
- Run Permissions Simulation or Permissions Migration again.
-
Change the default path length by changing the registry key, refer to Microsoft’s documentation here.
- It is not possible to migrate permissions to Private folders on Egnyte.
Mapping
Permissions mapping is detailed below.
|
NTFS Permission |
Egnyte Permission |
| Full Control | Full |
| Modify | Editor |
| Write | Editor |
| Read | Viewer |
| Read & Execute | Viewer |
| Change Permissions | Owner |
| Take Ownership | Owner |
| File Owner | Owner |
| Delete Subfolders and Files | Full |
| Delete | Full |
| Create Files/Write Data | Editor |
| Create Folders/Append Data | Editor |
| Write Attributes | Editor |
| Write Extended Attributes | Editor |
| Traverse Folder/Execute File | Viewer |
| Read Extended Attributes | Viewer |
| Read Attributes | Viewer |
| Read Permissions | Viewer |
What If Some Users And Groups Have Not Yet Been Created On Egnyte?
Permission Migration will complete even if some Users or Groups from the Source are not found on Egnyte. These users and groups will be listed in 'Missing Users' and 'Missing Groups' worksheets in the Migration Report.
Create the missing Users and Groups Egnyte, then run Permissions Migration again or manually apply the appropriate permissions.
Permissions Simulation
Permissions Migration is usually the last step in a migration project, but there are times to do a dry-run before initiating the actual Permissions Migration. A Permissions Migration Simulation provides insights into any missing Users and Groups on Egnyte that will be needed to create before running the final Permissions Migration command.
Prior to initiating either the Simulation or a Permissions Migration, first create all the expected Groups and Users on the Egnyte domain.
Navigate to the Migration Details page. On the Migration Actions menu, select Permissions Simulation.
This will initiate a three-step process.
- First, Migration App scans the source to identify NTFS permissions.
- Next, it scans the destination domain to identify Users and Groups that have already been created.
- Finally, it compares the two to provide insights as to what might be missing
Depending on the number of permissions on either the source or destination, these scans can take some time to complete.
Once the command has completed, the results will be displayed on the Migration Details page. Additional information may be found on the Migration Job Report.
Permissions Simulation Results On The Migration Job Report
Click Download Job Report and open the CSV file. The Migration Summary register will include the Permissions Simulation on the list of completed commands.
It is also possible to select the Perms Migration Simulation register for more detailed information. And the Missing Users and Missing Groups registers will provide a list of anything found missing.
Questions? Feature Requests? Other Feedback?
Feature suggestions or requests can be submitted here, with a mention of Migration App in the text.
For more complex requests that would benefit from providing screenshots or other attachments can be submitted to support@egnyte.com. Be sure to include Migration App in the email title. The Support team will push the request to the Product team for consideration.