Connect tenants
Register source (and destination) Entra app profiles with encrypted client secrets.
Every migration domain follows the same cautious rhythm: collect evidence, stage decisions, and only write to Microsoft 365 when an operator signs off.
Inventory Forms, Loop, and Bookings with read-only jobs.
Edit per-line destination mappings before any live write.
Build the plan and export artifacts without touching M365.
Typed confirmation and admin role for mutating operations.
Execute when the evidence ledger says it is safe to move.
Register source (and destination) Entra app profiles with encrypted client secrets.
Test Graph roles, Forms app/delegated access, and Loop SPE guest grants before running jobs.
Inventory Forms, Loop, and Bookings with read-only jobs that produce artifacts and mapping rows.
Edit per-line mappings in the console before any live write.
When mutating operations ship, live jobs require typed APPROVE {job-id} confirmation and admin role.