Home / Platform Considerations

Google Workspace / Gmail Considerations

The following considerations should be understood when migrating to or from Google Workspace or Gmail.

Google Workspace Authentication

To migrate bulk accounts to or from Google Workspace (formerly called G Suite), you will need to set up a Google Service Account. You will grant permission to a service account to access your Google Workspace data, allowing you to execute an efficient migration.

Follow these directions to create a Google Service Account:

Note: If you are trying to create a Google Service Account, and received the following error message that “Service account key creation is disabled”, follow the steps below to enable Service account key creation.

Single-user authentication

To migrate a single mailbox (or only a few mailboxes) without usage of a Service Account, you will need to use end-user credentials (email address and password) for each account you migrate.

Migrate from Google Vault

If you are migrating data from Google Vault, follow these steps to modify your Google Service Account and enable Advanced Custom Options in Transend Migration Console.

Migrate mail into Google Groups/Collaborative Inboxes

If you are migrating email into Google Groups (Collaborative Inboxes), customize your configuration and allowed scopes to support the migration.

Multi-party approval required for domain-wide delegation

Google added domain-wide delegation to the Multi-party approval feature, which requires one Super Admin to approve the actions of another. If Multi-party approval is enabled for your organization, editing scopes or deleting domain-wide delegation for a client app requires approval from another super admin.

Snoozed messages

When migrating Snoozed messages between Google Workspace or Gmail accounts, by default all Snoozed messages will migrate into a folder named Snoozed Mail in the target mailbox.

Restrictions on new Google Workspace tenants

For new Google Workspace tenants, Google may impose a security policy based on your domain reputation that impacts data migration. Google Workspace applies counter-abuse measures to new domains to prevent potential data exfiltration. These measures can block the movement of data until the new tenant establishes a positive payment history. Specifically, the restriction is generally lifted once the total payments made to Google reach at least $30 USD. If the account is in trial mode, the Google Workspace administrator can make an early payment to meet this threshold. Once payment is processed, it typically takes approximately 24 hours for the reputation status to update and the data transfer block to be removed by Google.