How can I manage user access to ShareGate?

This article explains how to manage user access to the Teams management module. For information on how to manage user access to the migration tool, see How can I manage access to ShareGate's migration tool?

Who has access to the Teams management module?

Once a global administrator has consented ShareGate, any global administrator, SharePoint administrator, or groups administrator can log in to the Teams management module with their Microsoft 365 account.

When using PowerShell to manage admin roles in Azure AD, use the ObjectID:

• f28a1f50-f6e7-4571-818b-6a12f2af6b6c (SharePoint admin)
• 62e90394-69f5-4237-9190-012177145e10 (global admin)
• fdd7a751-b60b-444a-984c-02652fe8fa1c (groups admin)

Note: If a user's role assignment is granted through Azure Privileged Identity Management (PIM), they will not be able to access the Teams management module.

Owners

Team and group owners will be contacted by email or our ShareGate Teams chatbot when their input is needed. They do not have access to ShareGate directly.

How can I restrict access to the Teams management module?

You can restrict user access to the Teams management module through the Azure Portal with the steps below:

1. Sign in to your Microsoft Azure portal as a global administrator.
2. Navigate to the Enterprise applications service (either through the search bar or from the Azure services section).
3. Use the search field to find ShareGate.
4. In the list of your applications, select ShareGate Teams management. You will be brought to the Overview page.
   
   Note: If you consented ShareGate prior to February 14, 2022, ShareGate Teams management may be named ShareGate Apricot in Azure.
5. From the menu, under Manage, select Properties. 
6. Set Assignment required? to Yes.
7. Click Save.
8. From the menu, under Manage, click Users and groups.

From the Users and groups page, you can now add users to grant access or remove users to remove access.