Synchronizer SharePoint ACS Migration

Requirements Prior to Migration

• Global Administrator access in Microsoft Entra ID (required to grant admin consent during migration)
• Access to the Zensai Automation Center

Overview of the Migration Process

The migration process will include granting two new Automation Center permissions while removing the old SharePoint ACS usage. 

Admin Consent

During migration, admin consent will request the following permissions:

• The permission labeled “Have full control of all site collections” is a delegated permission. This means the application can only access sites that the signed-in user (in the Automation Center) already has access to.
• This permission is required temporarily so the migration process can assign the Access selected site collections permission which is used to store and maintain the authorization relationship between the Synchronizer and the selected SharePoint site
• After the site permissions have been assigned, the delegated Sites.FullControl.All permission is no longer required for ongoing synchronization and may be revoked, unless you plan to change or add SharePoint sites in the future.

The “Access selected site collections” permission allows the system to access the specific site you choose in the settings. It will be used on an ongoing basis by the Synchronizer service to process CSV files.

To assign Sites.Selected permissions, the migration process temporarily uses Sites.FullControl.All (delegated) to perform the site permission grant.

Migration Steps

1. Navigate to the Automation Center.
2. Go to the Synchronizer > Settings.
3. Scroll down to the Use CSV from SharePoint library section.

4. Select Update SharePoint Permissions

   

5. Click the Continue button.

   

6. Accept the permissions. 
7. The migration is complete.

Video Walkthrough of the Migration Process

Watch the following video for a walkthrough of the Synchronizer migration process.