Migration Management delegation
Data Migrator allows you to delegate the management of migrations to specific groups of non-admin users with Migration Management. Delegating the management of migrations across teams, users and groups is beneficial when dealing with larger numbers of individual data migrations.
With LDAP Authentication and Access control configured, you can create Management Groups containing specific users and assign specific migrations to these groups. Then with Migration Management enabled, migrations assigned to groups are controlled and managed by admin users and only the non-admin (migration managers) users in those groups.
You'll need to enable Migration Management through the UI. LDAP Authentication and Access Control is required and must be configured.
Additional information
- Admin users have the option to assign a migration Management Group or leave unassigned when creating a migration.
- Non-admin migration managers have the option to assign a migration to any Migration Management group they have membership of but cannot leave it blank.
- Admin users have the option to change or remove a Management Group when editing a migration.
- Migration metric data from the dashboard or metric submenu is not available to non-admin users in a migration Management Group.
- Only admin users can view and adjust migration priority for migrations assigned to a Management Group.
- Admin users still have full access to all features and functionality. Non-admin users not assigned to a migration Management Group will no longer have access to view or manage any migration.
Prerequisites
- LDAP Authentication and Access Control must be configured before Management Grouping can be enabled.
For example, with LDAP configured, configure Access Control to give users or groups of users management access with the following steps.
- Sign in to the UI with your registered admin user account.
- Select the settings cog on the upper-right to go to the Settings page.
- Select Access Control.
- Set up role based access control settings as required.
- Under Role Mapping, enter the attribute value that will match the "Group Name Attribute" (specified in Access control) for each LDAP group under Migration Manager Groups. Add attribute values one by one.
- Select Apply to update the settings.
Enablement overview
- Enable LDAP to provide user authentication.
- Configure Access Control to provide users with Migration Manager access.
- Create a Management Group and assign users with Migration Manager access to the group.
- Assign migrations to the Management Group to allow these Migration Manager users management control of these migrations.
- Enable Migration Management to enforce the delegation of migration management to Management Groups.
Create a Management Group
Migration Management groups can be created before enabling Migration Management. Enable Migration Management for management changes to take effect.
- Sign in to the UI with your registered admin user account.
- Select the settings cog on the upper-right to go to the Settings page.
- Select Migration Management from the submenu.
- Select Create Group to create a new Management Group.
- In the Group Name field, enter a name.
- In the LDAP Group Filter field, supply the value that will match the "Group Name Attribute" specified in Access Control configuration. For example if the Group Name Attribute is cn, provide the cn value for the group.info
Ensure the values you enter for the LDAP Group Filter are in the correct case as specified in your directory service.
- Select Create to create the new group.
If the users added to the group don't have Migration Manager access in Access Control, they won't be able to manage migrations. Ensure any groups you create include users with adequate Access Control.
View and edit Management Group
View or edit your Management Group name, LDAP Group Filter and view its associated migrations.
- Sign in to the UI with your registered admin user account.
- Select the settings cog on the upper-right to go to the Settings page.
- Select Migration Management from the submenu.
- Under Management Groups, select the group from the list.
- View or edit the Group Name and LDAP Group Filter under View Group.
- View the group's assigned migrations under Associated Data Migrations and Associated Metadata Migrations.
Delete Management Group
Delete an existing Management Group.
- Sign in to the UI with your registered admin user account.
- Select the settings cog on the upper-right to go to the Settings page.
- Select Migration Management from the submenu.
- Under Management Groups, select the group from the list.
- Select Delete to remove the Management Group, assigned migrations will become unassigned.
Assign migrations to group
You can assign already created migrations to a group as a bulk action, or when creating the migration, or by editing an existing migration.
Migrations can be assigned to one group, but a group can have multiple migrations.
- To assign an individual migration to a Management Group see: Assign Management Group to a data migration or Assign Management Group to a metadata migration.
- To set the Management Group when creating a migration see: Create a data migration or Create a metadata migration.
- To assign a Management Group to a migration with a bulk action see: Bulk actions.
Bulk assign migrations to group
- On the Dashboard page, select the relevant instance from the Instances panel.
- Select Data Migrations from the Migrations menu on the left side.
- Under Bulk Action, select Assign group.
- Select all migrations you want to update.
- Under Grouping, select the Management Group.
- Select Submit to apply the change.
You can also remove or change the group assignment using bulk actions. See Bulk actions for more information.
Remember to Enable Migration Management for management changes to take effect.
Enable Migration Management
Enable Migration Management to enforce your configured migration management delegation configuration with the following steps.
- Sign in to the UI with your registered admin user account.
- Select the settings cog on the upper-right to go to the Settings page.
- Select Migration Management from the submenu.
- Select Enable Migration Management.
- Select Save.
If you've enabled Migration Management and later applied changes to your LDAP Authentication configuration, Migration Management will automatically become disabled. You'll need to Enable Migration Management again after applying any changes to your LDAP configuration.