Migration Management delegation

Data Migrator allows you to delegate the management of data migrations to specific groups of non-admin users with Migration Management.

With LDAP Authentication and Access control configured, Management Groups containing specific users can be created and migrations assigned to these groups.

With Migration Management enabled, migrations assigned to groups are controlled and managed by admin users and only the non-admin (migration managers) users in those groups.

Delegating the management of migrations across teams, users and groups is beneficial when dealing with larger numbers of individual data migrations.

Enable Migration Management through the UI.

LDAP Authentication and Access Control must be configured.

Additional information

info

• Admin users have the option to assign a migration Management Group or leave unassigned when creating a migration.
• Non-admin migration managers have the option to assign a migration to any Migration Management group they have membership of but cannot leave it blank.
• Admin users have the option to change or remove a Management Group when editing a migration.
• Migration metric data from the dashboard or metric submenu is not available to non-admin users in a migration Management Group.
• Only admin users can view and adjust migration priority for migrations assigned to a Management Group.
• Admin users still have full access to all features and functionality. Non-admin users not assigned to a migration Management Group will no longer have access to view or manage any migration.

Prerequisites

• LDAP Authentication and Access Control must be configured before Management Grouping can be enabled.

For example, with LDAP configured, configure Access Control to give users or groups of users management access with the following steps.

1. Sign in to the UI with your registered admin user account.
2. Select the settings cog on the upper-right to go to the Settings page.
3. Select Access Control.
4. Set up role based access control settings as required.
5. Under Role Mapping, enter the attribute value that will match the "Group Name Attribute" (specified in Access control) for each LDAP group under Migration Manager Groups. Add attribute values one by one.
6. Select Apply to update the settings.

Enablement overview

• Enable LDAP to provide user authentication.
• Configure Access Control to provide users with Migration Manager access.
• Create a Management Group and assign users with Migration Manager access to the group.
• Assign migrations to the Management Group to allow these Migration Manager users management control of these migrations.
• Enable Migration Management to enforce the delegation of migration management to Management Groups.

Create a Management Group

note

Migration Management groups can be created before enabling Migration Management. Enable Migration Management for management changes to take effect.

1. Sign in to the UI with your registered admin user account.
2. Select the settings cog on the upper-right to go to the Settings page.
3. Select Migration Management from the submenu.
4. Select Create Group to create a new Management Group.
5. In the Group Name field, enter a name.
6. In the LDAP Group Filter field, supply the value that will match the "Group Name Attribute" specified in Access Control configuration. For example if the Group Name Attribute is cn, provide the cn value for the group.
7. Select Create to create the new group.

tip

If the users added to the group don't have Migration Manager access in Access Control, they won't be able to manage migrations. Ensure any groups you create include users with adequate Access Control.

View and edit Management Group

View or edit your Management Group name, LDAP Group Filter and view its associated migrations.

1. Sign in to the UI with your registered admin user account.
2. Select the settings cog on the upper-right to go to the Settings page.
3. Select Migration Management from the submenu.
4. Under Management Groups, select the group from the list.
5. View or edit the Group Name and LDAP Group Filter under View Group.
6. View the group's assigned migrations under Associated Data Migrations.

Delete Management Group

Delete an existing Management Group.

1. Sign in to the UI with your registered admin user account.
2. Select the settings cog on the upper-right to go to the Settings page.
3. Select Migration Management from the submenu.
4. Under Management Groups, select the group from the list.
5. Select Delete to remove the Management Group, assigned migrations will become unassigned.

Assign migrations to group

You can assign already created migrations to a group as a bulk action, or when creating the migration, or by editing an existing migration.

note

Migrations can be assigned to one group, but a group can have multiple migrations.

• To assign an individual migration to a Management Group see: Assign Management Group.
• To set the Management Group when creating a migration see: Create a migration.
• To assign a Management Group to a migration with a bulk action see: Bulk actions.

Bulk assign migrations to group

1. On the Dashboard page, select the relevant instance from the Instances panel.
2. Select Data Migrations from the Migrations menu on the left side.
3. Under Bulk Action, select Assign group.
4. Select all migrations you want to update.
5. Under Grouping, select the Management Group.
6. Select Submit to apply the change.

note

You can also remove or change the group assignment using bulk actions. See Bulk actions for more information.

tip

Remember to Enable Migration Management for management changes to take effect.

Enable Migration Management

Enable Migration Management to enforce your configured migration management delegation configuration with the following steps.

1. Sign in to the UI with your registered admin user account.
2. Select the settings cog on the upper-right to go to the Settings page.
3. Select Migration Management from the submenu.
4. Select Enable Migration Management.
5. Select Save.