Manual App Registration for SharePoint Migration

Use this page to configure the two Microsoft Entra ID applications required for an EdbMails SharePoint migration. Register SharePoint Migration Source in the Source tenant for reading the SharePoint data in scope, and register SharePoint Migration Target in the Target tenant for destination access.

This page contains the SharePoint-specific app names, permissions and connection details. For the common portal procedure, refer to the Microsoft Entra ID App Creation Guide for app creation, client-secret creation, Microsoft Graph Application permissions and admin consent.

Quick configuration summary

Before you configure the SharePoint apps

• Confirm which Microsoft 365 tenant is the SharePoint Source and which tenant is the Target.
• Keep the Source and Target SharePoint Online URLs and their Admin Center URLs available for the EdbMails connection.
• Have the Microsoft 365 Global Administrator account email address used for each SharePoint connection ready.
• Store the Client ID, Tenant ID and Client Secret Value with the corresponding SharePoint Source or Target app so the credentials are not interchanged.
• Add the complete permission list to each SharePoint app before granting admin consent.

Steps to manually register an app for SharePoint Migration

Click the Source SharePoint app or Target SharePoint app accordion below based on the tenant you are configuring.

1. Source SharePoint app

   1. Create the Source SharePoint app

   Create the application in the Source tenant. Enter the application name as SharePoint Migration Source.

    Click here to know the steps to create the app in Microsoft Entra ID.

   2. Create the Source client secret

   Create a client secret for SharePoint Migration Source. Copy the Client Secret Value when it is displayed and keep it with the Source application details.

    Click here to know the steps to create a client secret.

   3. Add Source SharePoint permissions

   Set all these permissions in the SharePoint Migration Source app.

   API: Microsoft GraphPermission type: Application permissions

   • Files.Read.All
   • Group.Read.All
   • GroupMember.Read.All
   • Sites.Read.All
   • User.Read.All

   After the five Source SharePoint permissions are in place, grant admin consent in the Source tenant.

    Click here to know steps to add Application permissions and grant admin consent.

2. Target SharePoint app

   1. Create the Target SharePoint app

   Create the application in the Target tenant. Enter the application name as SharePoint Migration Target.

    Click here to know the steps to create the app in Microsoft Entra ID.

   2. Create the Target client secret

   Create a separate client secret for SharePoint Migration Target. Copy and securely store its Client Secret Value.

    Click here to know the steps to create a client secret.

   3. Add Target SharePoint permissions

   Set all these permissions in the SharePoint Migration Target app.

   API: Microsoft GraphPermission type: Application permissions

   • Files.ReadWrite.All
   • Group.ReadWrite.All
   • GroupMember.ReadWrite.All
   • Sites.Create.All
   • Sites.FullControl.All
   • Sites.ReadWrite.All
   • User.Read.All

   After adding the seven Target SharePoint permissions, grant admin consent in the Target tenant.

    Click here to know steps to add Application permissions and grant admin consent.

Why the Source and Target permission lists are different

The Source and Target connections perform different roles during a SharePoint migration. The Source app reads the migration data from the source environment. The Target app requires the permissions needed to create or write migrated content in the destination. For this reason, do not copy the Source permission list to the Target app or the Target permission list to the Source app.

1. Connect the SharePoint tenants in EdbMails

   Source connection

   In EdbMails, choose the manual registration option for the Source SharePoint Online tenant. Enter the Source SharePoint Online URL, Source Admin Center URL, and the Microsoft 365 Global Administrator account email address.

   

   Enter the Source Application (Client) ID, Source Directory (Tenant) ID, and Source Client Secret Value from the SharePoint Migration Source app.

   

   Target connection

   When connecting the Target SharePoint Online tenant, enter the corresponding Target SharePoint Online URL, Target Admin Center URL, Microsoft 365 Global Administrator account email address, Target Application (Client) ID, Target Directory (Tenant) ID, and Target Client Secret Value.

   Keep the app details matched: The Client ID, Tenant ID and Client Secret used for the Target connection must all belong to the SharePoint Migration Target app in the Target tenant.

Verify the SharePoint app registration before connecting EdbMails

• SharePoint Migration Source is registered in the Source tenant.
• The Source app has the five Microsoft Graph Application permissions shown in the Source SharePoint section.
• SharePoint Migration Target is registered in the Target tenant.
• The Target app has the seven Microsoft Graph Application permissions shown in the Target SharePoint section.
• Admin consent has been granted in each tenant after its permission list was completed.
• The SharePoint URL, Admin Center URL and app credentials entered in EdbMails belong to the tenant being connected.

1. Troubleshooting manual app registration

   1. EdbMails cannot authenticate the SharePoint connection

      Check the SharePoint tenant you are connecting first. Confirm that its Application (Client) ID, Directory (Tenant) ID and Client Secret Value all come from the matching SharePoint Source or Target app, and verify that admin consent is granted for that app.

   2. The Source app has Target permissions or the Target app has Source permissions

      Compare the application with the permission lists above and correct the mismatch. The Source and Target lists are intentionally different because each connection performs a different role during migration.

   3. I copied the Client Secret ID instead of the Client Secret Value

      For the SharePoint connection, enter the Client Secret Value, not the Secret ID. If the Value is no longer visible in Microsoft Entra ID, create a new secret for that SharePoint app and copy the new Value when it is displayed.

1. Frequently asked questions

   1. Are the SharePoint permissions Application or Delegated permissions?

      For the SharePoint Source and Target apps on this page, choose Application permissions under Microsoft Graph.

   2. Do the Source and Target SharePoint apps use the same permissions?

      No. The SharePoint Source app uses the five read-oriented permissions listed in its section, while the Target app uses the seven destination permissions listed in the Target section.

   3. Where should Sites.FullControl.All be added for the Target SharePoint app?

      Add Sites.FullControl.All under Microsoft Graph > Application permissions as part of the Target permission list on this page.

   4. Do I need two app registrations for a tenant-to-tenant SharePoint migration?

      Yes. Create the Source app in the Source tenant and the Target app in the Target tenant for the manual configuration covered here.

   5. Where do I create the app and client secret?

      Open the Microsoft Entra ID App Creation Guide for the common registration and client-secret procedure, then return here to apply the SharePoint-specific Source or Target values.

   6. What information do I need when connecting SharePoint in EdbMails?

      Keep the SharePoint Online URL, Admin Center URL, administrator account email address, Application (Client) ID, Directory (Tenant) ID and Client Secret Value for the tenant being connected.

   7. Can I use this permission list for OneDrive or Teams migration?

      No. Use the dedicated OneDrive, Teams and Channel, or Private and Group Chat manual-registration page for those workloads.

Use this configuration with the SharePoint migration workflow

After creating the Source and Target applications, return to the appropriate SharePoint migration workflow and use the application details for the tenant being connected.

• SharePoint to SharePoint Migration Guide
• SharePoint Tenant to Tenant Migration
• SharePoint Cross-Tenant Migration
• SharePoint Migration Checklist

Related EdbMails resources