On This Page
Table of Contents |
---|
Overview
A user account or group map provides the ability to explicitly associate users and groups for the purposes of setting authorship and permissions on items transferred.
...
A source and destination connection are required to create a map, and they need to match the source and destination of the job that will be referencing the
...
map.
...
A map can be created before or during the creation of the job
...
, and a map can be used across multiple jobs.
...
Note that updates to a map will not be
...
applied to content that has already been transferred.
...
There are three parts to a map:
Automatic mapping: Automatically map users and groups based on rules.
Explicit mapping: Explicitly match users or groups on the source platform to users or groups on the destination platform.
Exclusions: Specify users and groups to exclude from permission preservation.
Info |
---|
While only automatic mapping policies are required to create a user or group map, the explicit mapping and exclusions strengthen the map and result in better permission preservation results. |
Creating a Map
Click Migrate in the navigation menu on the left.
Click Maps.
The page defaults to User maps. Use the menu to select Group maps if you want to create or manage a group map.
Click the create map button.
The corresponding Create map modal opens.
Enter a name for the map you are creating. A name is required in order to save the map.
Select the source and destination connections the map uses.
Select the automatic mapping options you want to use for the map.
...
Click Done to create the map.
Mapping Policy
DryvIQ will attempt to map users or group from one platforms to another using the rules you select in this section. Note that all options are flagged as optional; however, you must select at least one of the following options in order for the map to work: id, name, username, email, display name, or retain external users.
User Map Mapping Policy
...
Field
...
Description
...
Required
...
Link matching user IDs
...
Match accounts by ID.
...
Optional
...
Link matching user names
...
Match accounts by name.
...
Optional
...
Link matching user email addresses
...
Match accounts by email.
...
Optional
...
Link matching user usernames
...
Match accounts by username.
...
Optional
...
Use fuzzy matching
...
Fuzzy matching performs partial matching on all fields selected on supported platforms.
...
Optional
...
Retain external users
...
Retain guest account permissions and authorship.
This option is not available for all connectors.
This option will not be applied to User Account Mapping jobs.
...
Optional
...
Attempt to resolve first
...
This option is only available when Retain external users is selected. This option retains guest account permissions and authorship but attempts to resolve the account against a destination account first before retaining the permissions and authorship utilizing an external user account.
...
Optional
...
Do not attempt to resolve first
...
This option is only available when Retain external users is selected. This option retains guest account permissions and authorship utilizing an external account without first attempting to resolve the account against a destination account.
Note: External email addresses already associated as a guest account in OneDrive for Business/Office 365 will work regardless of whether this option is selected.
This is most commonly used for Network File Share (NFS)
...
Optional
Group Map Mapping Policy
...
Option
...
Description
...
Required
...
Link matching user IDs
...
Match accounts by ID.
...
Optional
...
Link matching group names
...
Match accounts by name.
...
Optional
...
Link matching group display names or captions
...
Match accounts by display name or captions.
...
Use fuzzy matching
...
Fuzzy matching performs partial matching on all fields selected on supported platforms.
...
Optional
Unmapped Policy
Both user and group maps allow you to select how you want DryvIQ to handle users or groups that can’t be matched to a user or group on the destination. Select the option you want to use.
...
Option
...
Description
...
Match unmapped users/groups to a default user/group
...
Any unmapped users or groups will be assigned to a default user or group. When you select this option, a list of users or groups (based on the type of map you are creating) on the destination displays. Select the user or group you want to use.
...
Skip unmapped users/groups
...
Unmapped users or groups will be skipped.
...
Log a warning in the audit log and skip unmapped users/groups
...
Unmapped users or groups will be skipped, and a warning will be added to the job audit log.
Notes on expected behavior
...
If the user is NOT in the account map but the shared item to this missing user is NOT in the root, each item will be logged on the overview individually, and each item has log history showing permission failure.
...
Find the map and click Manage mappings.
Use the User mappings or Group mapping page (based on the map type) to add explicit mappings for users and groups on the source to users and groups on the destination. This can be done manually or by importing a mapping file.
Use the Exclusions page to add exclusion mapping for accounts or groups that should be excluded from permission preservation.
Creating a Map During Job Creation
If you want to use a group or user map but do not create the map before you create the job that will use the map, you must create the map when creating the job. You must enable Permission Preservation for the job and turn the Preserve item authorship/ownership and/or the Preserve item permissions toggle on. This displays the User and group mapping policy section at the bottom of the page. Click Create new user map policy or Create new group map policy depending on the map you want to create.
Creating the map while creating the job only allows you to specify the automatic mapping policies you want to use. If you need to add explicit mapping or exclusions, you will need to save the job without running it and edit the map as needed. Once you have finished updating the map, you can run the job.
...