Connecting accounts

Before starting migrations, administrators must connect both the source and the destination environments to VaultMe for Admins. The platform supports two connection methods: admin authorization and manual (user-based) authorization.

All connections are encrypted and can be revoked at any time.

Admin authorization

This is the more efficient method of connection. Using admin authorization, the administrator grants VaultMe for Admins permission to access all user accounts within the organization at once.

This method is recommended whenever the administrator running the migration has admin privileges in the environment(s).

It is possible to use admin authorization for one environment and user-based authorization for the other.

To connect your Microsoft 365 environment to VaultMe for Admins:

1. On your VaultMe for Admins dashboard, click "Add accounts."
2. Click the "Enter a list" tab.
3. Click "Connect environments."
4. Click "Show connection steps."
5. Sign in with a Global Administrator account from the source Microsoft 365 tenant.
6. Grant admin consent with Microsoft 365. This will allow VaultMe for Admins to use tenant user accounts during the migration.
7. Click "Sign in with Microsoft" to verify the domain ownership by signing in as an administrator again. If successful, the screen will update automatically.

To connect your Google Workspace environment:

1. On your VaultMe for Admins dashboard, click "Add accounts."
2. Click the "Enter a list" tab.
3. Click "Connect environments."
4. Click "Show connection steps."
5. Sign in to the Google Admin console as a Super Admin at https://admin.google.com
6. Navigate to Security → Access and data control → API controls.
7. Ensure that third-party app access is allowed, or explicitly allow VaultMe for your organizational unit.
8. Click MANAGE DOMAIN WIDE DELEGATION.
9. Click Add new.
10. Copy and paste the following ID into the Client ID field: 100707390987972097475.
11. Copy and paste the following scopes into the OAuth Scopes field (comma-separated):

https://www.googleapis.com/auth/admin.directory.domain.readonly,
https://www.googleapis.com/auth/admin.directory.group,
https://www.googleapis.com/auth/admin.directory.user,
https://www.googleapis.com/auth/userinfo.email,
https://www.googleapis.com/auth/userinfo.profile,
https://www.googleapis.com/auth/calendar,
https://www.googleapis.com/auth/drive,
https://www.googleapis.com/auth/contacts,
https://mail.google.com/

12. Click Authorize.

13. Complete the connection by signing in as a Super Admin.

Manual (user-based) authorization

If admin authorization cannot be used (for example, when the administrator does not have admin privileges or some or all of the accounts are personal rather than business-grade ones), accounts can be connected individually.

There are two ways to do this:

• The administrator can sign in to each source or destination account using user credentials (email and password). MFA must be disabled, unless users are available to assist the administrator with the sign-in process.
• The administrator can share a sign-in link with users so they can connect their own accounts to the VaultMe for Admins app.

This method is best suited for cases where not all accounts can be managed centrally.

To connect accounts manually:

1. On your VaultMe for Admins dashboard, click "Add accounts."
2. Click the "Select" tab.
3. Click "Connect source user accounts using end-user credentials."
4. Follow the instructions provided by the app to sign in to the user accounts or send the link to users.

If you choose to send the sign-in link to users or connect multiple accounts yourself, you can click the "View all connected user accounts in your VaultMe workspace" link to see which users have already signed in.