Partial M365 tenant exit
Hi all,
Scenario I keep running into. A few users leave a parent M365 tenant for a new entity, and you need to pull their mailboxes, OneDrive and a SharePoint site out cleanly. Source IT refuses any tenant-wide app consent on confidentiality grounds, and to be clear, I get it, I'm not questioning that stance. The best they'll usually offer is a Site Collection Admin user account scoped to the one site, which isn't enough for any serious migration tool. In the recent cases I've handled I've ended up falling back to Purview exports.
Two things I'd love your input on.
First, on the communication side. How do you frame the ask so source admins actually engage with it? Most hear "app consent" and shut down without considering scoped options that are arguably more restrictive than what they're already giving you. I feel like there must be a better way to have that conversation but I haven't found the right wording yet.
Second, when you do end up in that situation, do you propose any alternative to the outgoing partner before falling back to a Purview export? I'm wondering if there's a middle ground I'm missing, something less heavy than full app consent but more workable than a raw export.
Thanks in advance, curious how others handle this kind of thing.