01
Connect tenants
Register source (and destination) Entra app profiles with encrypted client secrets.
Every migration domain follows the same cautious rhythm: collect evidence, stage decisions, and only write to Microsoft 365 when an operator signs off.
Inventory Forms, Loop, and Bookings with read-only jobs.
Edit per-line destination mappings before any live write.
Build the plan and export artifacts without touching M365.
Typed confirmation and admin role for mutating operations.
Execute when the evidence ledger says it is safe to move.
| Workstream | App-only Graph | Extra step | Operator action |
|---|---|---|---|
| Forms | ✓ | Delegated OAuth for group forms | Connect group Forms in Tenant access |
| Loop | ✓ | SPE guest grant | Copy Set-SPOApplicationPermission scripts |
| Bookings | ✓ per business ID | Manual business IDs | Paste IDs when creating discover job |
Register source (and destination) Entra app profiles with encrypted client secrets.
Test Graph roles, Forms app/delegated access, and Loop SPE guest grants before running jobs.
Inventory Forms, Loop, and Bookings with read-only jobs that produce artifacts and mapping rows.
Edit per-line mappings in the console before any live write.
When mutating operations ship, live jobs require typed APPROVE {job-id} confirmation and admin role.
Every discover and export job produces inspectable files in your workspace.
142 forms with response counts and owner metadata
HTML render + raw Loop archive per container
Structured entities for shared business IDs