OmniMigrate · A Yantran product · Zero-downtime M365 tenant migration Book a walk-through →
OMNIMIGRATE · M365 Tenant Migration · by Yantran

Two tenants.
One plan.
Zero downtime.

OmniMigrate reads both your source and target Microsoft 365 tenants, builds a complete migration blueprint in under a minute, and runs the cutover in waves — with a 90-day safety net that catches every last message.

Book a demo → See the AI Planner ↓
app.omnimigrate.yantran.com / dashboard
Migration dashboard

Two tenants. One plan. Running.

● Source healthy ● Target healthy ● Delta sync live
18,240Mailboxes discovered+312 today
94.2 TBOneDrive & SharePointready to cut
612Teams & channelsmapped 1:1
0Bytes lostverified
Migration waves 4 of 4 scheduled
Wave 1 · Exec & Finance
Cut · Apr 08
Wave 2 · Engineering
Cut · Apr 11
Wave 3 · GTM & Success
Running · 2.1k / 2.8k
Wave 4 · Contractors
Queued · Apr 22
DNS cutover 24 domains
  • atlas.comMX · SPF · DKIM · DMARC
  • atlasindustries.ioSynced
  • northwind.coSPF drift · auto-fix queued
  • nw-labs.devSynced
Rollback window15 min
Live activity ● streaming
  • 10:42:18●Delta sync · 312 mailboxes re-verified · 0 errors
  • 10:41:52●Wave 3 · Sarah K. · cutover complete · 14.2 GB
  • 10:41:07●Teams channel "gtm-ops" · permissions preserved
  • 10:40:33●SharePoint site "finance-close" · ACLs mapped
AI plan confidence Updated 1m ago
  • Zero-downtime path · ✓
  • Delta + catch-up · ✓
  • Rollback ≤ 15 min · ✓
Live · 2 tenants connected
Plan generated 60sec Both tenants discovered, matched, scored — end to end.
Tenants migrated 40+ Tenant consolidations, M&A moves, divestitures.
Bytes lost 0ever Delta sync + catch-up run guarantees zero data loss.
Cutover window <30min 8-step orchestration, invisible handoff, not an outage.
01 / The problem

Tenant migrations break
in four predictable places.

M&A, divestiture, a cross-region tenant move — whatever the reason, the mechanics are the same. And they fail for the same four reasons every time.

01

Spreadsheets lie

Someone hand-matches 4,000 users in Excel, then realises UPN drift, alias conflicts, and orphan mailboxes on cutover night.

02

DNS is destiny

Get one MX record wrong and every inbound email queues or bounces for 48 hours. TTLs don't forgive.

03

Permissions go dark

Shared mailboxes, delegates, send-as rights, distribution lists — all rewired by hand, most of them missed until a user complains.

04

The catch-up never catches up

Between last sync and cutover, thousands of messages arrive at the source. Without delta-sync automation, they're gone.

So we built

A planner that reads both tenants, writes the playbook, and runs the playbook — while you watch one dashboard instead of juggling seven spreadsheets.

02 / Connect

Two sign-ins. No
Azure portal safari.

Click the source button, sign in as a Global Admin. Click the target button, do the same. OmniMigrate creates its own app registrations, grants the right scopes, encrypts the tokens, and probes what Graph actually allows on your tenant.

Source tenant · read-only

Discover without touching

source.onmicrosoft.com · origin tenant
  • User.Read.All · Mail.Read · Group.Read.All
  • Directory.Read.All · Sites.Read.All
  • Reports.Read.All · AuditLog.Read.All
  • Provider capability probe · admin-level detection
  • EWS fallback activated automatically if Graph is capped
Connect source →
Target tenant · full-write

Provision with consent

target.onmicrosoft.com · Microsoft 365
  • User.ReadWrite.All · Mail.ReadWrite
  • Directory.ReadWrite.All · Group.ReadWrite.All
  • Sites.FullControl.All · MailboxSettings.ReadWrite
  • Bulk provisioning up to 200 users per batch
  • License assignment checked against availability
Connect target →
22 Graph permissions · admin-consented ● All scopes granted
User.Read.All Mail.Read Mail.ReadWrite Group.Read.All Group.ReadWrite.All Directory.ReadWrite.All Sites.FullControl.All MailboxSettings.ReadWrite Reports.Read.All AuditLog.Read.All User.Invite.All Organization.Read.All
Encryption
AES-256-GCM
Tokens
Secure vault
Expiry
Post-migration
Revocation
One click in Azure
03 / Assess

Inventory the estate
before you move it.

Graph discovery runs both tenants in parallel, classifies every user, enumerates workloads, and flags the issues you'd otherwise hit on cutover day.

Users discovered
44
Synced + cloud-only · Global Admins: 2
Mailboxes
35
User · shared · resource · 6.9 TB
Groups & DLs
44
M365, security, distribution · memberships mapped
EX
Exchange Online
35 mailboxes · 6.9 TB · 62 delegates
TM
Teams & Channels
8 teams · 42 channels · 14.2k messages
SP
SharePoint
312 sites · 2.1 TB · libraries + permissions
OD
OneDrive
42 drives · 4.2 TB · shared links audited
DM
Domains & aliases
3 verified · 112 proxy addresses
LC
Licenses
E3 · E5 · Business Premium availability checked
!
3 items flagged for review. 2 duplicate UPNs in target (will resolve via prefix+domain rule), 1 custom domain not yet verified in target tenant, and 4 shared mailboxes need manual delegation review before Wave 2.
04 / AI Planner

A complete plan
in sixty seconds.

Ten discovery passes. A weighted multi-layer match. Wave assignment, DNS plan, cutover script, post-migration policy — generated, scored, and ready for your approval before you've finished your coffee.

77%
Migration confidence
Ready to proceed
User mapping
92%
Mapping confidence
88%
Domain readiness
75%
Blocker-free
100%
Target readiness
82%

The 10-step pipeline

01 · Discovery
Graph discovery
Users, groups, Teams, SharePoint, OneDrive, domains, licenses — both tenants in parallel.
02 · Domain map
Domain mapping
Primary replacement, alias preservation, conflict resolution proposed.
03 · Users
User matching
UPN, SMTP, prefix, alias, name — weighted multi-layer scoring.
04 · Tiers
Complexity tiers
Small / Medium / Large / Complex based on mailbox, OneDrive, delegates.
05 · Waves
Wave planning
Risk, department, manager-hierarchy, and dependency-aware grouping.
06 · Schedule
Schedule
Pre-stage, delta sync, cutover windows per wave with quiet-hour awareness.
07 · DNS
DNS plan
Exact MX, SPF, Autodiscover, DKIM, SIP records — sequenced.
08 · Post-mig
Post-mig policy
Alias preservation, forwarding, auto-reply templates, cleanup schedule.
09 · Rec.
Recommendations
Blockers, warnings, optimisations — each with a suggested action.
10 · Score
Confidence score
Five-factor rollup with per-category breakdown and ready-to-proceed gate.
Matching methods · priority order
01
Exact UPN match
user@domain.io = user@domain.io
100%
02
Exact SMTP match
Primary email addresses match
98%
03
Prefix + mapped domain
user@old.com → user@new.com
95%
04
Alias overlap
Source email found in target proxy addresses
92%
05
Prefix match (any domain)
Same username, different domain
90%
06
Display name similarity
Jaro-Winkler string comparison
80–90%

Wave strategy

Wave 0 · test
Single user
One volunteer, full end-to-end flow.
Wave 1 · pilot
IT + leadership
10–20% of users. 2–3 days.
Wave 2 · standard
By department
Manager + team stay together.
Wave 3 · complex
VIP & large
Big mailboxes, delegates, shared accounts.
Wave 4+ · catch-up
Stragglers
Resources, rooms, service accounts.
● Read-only until approved

The planner queries data — it doesn't touch it. No changes are written to either tenant until you click Approve & Execute.

05 / DNS plan

Mail routing, sequenced
to the second.

Three phases. Every record listed, every operation labeled, every TTL accounted for. Run a simulation before you touch production DNS — export a zone file if your provider needs it.

Phase 01

Pre-migration

TXTAddDomain verification record in target tenant
MXTTLLower TTL to 5 minutes, 48h before cutover
TXTVerifyConfirm all verified domains in target
Phase 02

Cutover

MXUpdatePoint to target tenant *.mail.protection.outlook.com
SPFUpdateInclude target tenant, keep legacy include 90 days
CNAMEUpdateAutodiscover → target tenant
CNAMEUpdateSIP / Lync / Teams federation records
DKIMRotateTarget selectors published, source selectors retired
Phase 03

Post-migration

MXVerifyMail flow test, external delivery check
MXTTLRestore to normal values (1 hour / 3600s)
SPFCleanRemove source tenant include at day 90
Simulation mode

Run every DNS check against your current zone before pushing. Any conflict, any missing record, any TTL still high — caught before the first user notices.

06 / Cutover

The whole show,
orchestrated.

From first delta sync to the user-notification email, every step runs on a timeline you can watch in real time — and reverse in one click for 90 days.

Stage 01
During waves
Incremental delta sync every 30 minutes — emails, calendar, OneDrive changes
Users keep working on source · zero interruption
Throughput, failures, active jobs streamed to dashboard
Stage 02
Catch-up run
Final sync after last wave completes — captures every change made during migration
Parity check: target mailbox item count matches source
Gate before cutover: must succeed or cutover is blocked
Stage 03
8-step cutover
1. Final delta sync — zero-loss guarantee
2. Create permanent aliases on target mailboxes
3. Activate forwarding from source to target
4. DNS / MX switch (automated, or manual zone export when needed)
5. Enable auto-reply on source mailboxes
6. Send user-notification email with new login
7. Validate mail flow to target · Autodiscover · DKIM
8. Unlock target mailbox access · wave marked complete
Stage 04
Post-migration
90-day monitoring: alias existence, forwarding health, delivery checks
Daily automated report · anomalies flagged in dashboard
Rollback available for the full 90 days · DNS reverts + forwarding reinstates
● Zero-downtime guarantee

Users never stop working. Source stays live during every wave, the catch-up run closes the gap, and the cutover is an invisible handoff — not an outage.

07 / Safety net

The mail keeps arriving.
For 90 days. Forever.

Every migrated mailbox carries its old identity with it. Aliases permanent. Forwarding for 90 days. Auto-reply for 90 days. Daily health checks. Cleanup on day 90 — except the aliases, which stay for good.

∞
Permanent

Alias preservation

Old SMTP addresses added as proxy aliases on target. A message to user@old.com arrives in user@new.com — forever.

90
90 days

Forwarding safety net

Inbox forwarding rules on source mailboxes catch anything still routed to the old tenant during DNS transition.

AR
90 days

Auto-reply

Branded auto-reply from the source mailbox, with the user's new email address and help-desk contact.

30
30 days

Monitoring

Daily automated verification of alias, forwarding, delivery. Any anomaly surfaces as a ticket, not a surprise.

Post-migration lifecycle
Day 0–30 · Active monitoringDay 31–90 · Forwarding + auto-replyDay 90+ · Aliases stay permanently
08 / Why OmniMigrate

Built by operators,
for the night you go live.

Six reasons it survives the cutover email you're dreading.

01 · Zero-config setup

Fifteen minutes to first connection

One bootstrap app, then every tenant after that is a sign-in click. No portal scavenger hunt, no client-secret copy-paste, no permission-checkbox marathon.

02 · Read-only planning

No changes until you approve

Ten discovery passes, a full execution plan, a confidence score — all generated without writing a byte to either tenant.

03 · AI-weighted matching

Six methods, one confidence score

UPN, SMTP, prefix+domain, alias, prefix-any, Jaro-Winkler name similarity — with manual override always available.

04 · Provider-aware

Knows what your tenant can't do

Detects legacy-hosted tenants, probes Graph scope availability, falls back to EWS for restricted workloads — automatically.

05 · 90-day safety net

Forwarding, auto-reply, monitoring

Aliases stay forever. Forwarding and auto-reply run for 90 days. Daily checks surface issues early instead of late.

06 · One-click rollback

The undo you've always wanted

Full 90-day window to reverse DNS, re-enable source routing, and reinstate forwarding — without a war room.

09 / Plans

Pay per user.
Per migration. Once.

Every tier unlocks the full pipeline — discovery, AI planner, wave orchestration, DNS automation, 90-day safety net. What changes is mailbox depth, SharePoint/OneDrive coverage, and the speed of our response. Licensed per user, one-time, with the target migration date baked in.

Trial

Pilot

Free

Prove the pipeline on a pilot group before you commit the budget.

  • Up to 3 users
  • Read-only discovery of both tenants
  • AI plan + confidence score
  • DNS simulation (no push)
  • No production cutover
Start a pilot
Most tenants

Standard

$6/user · one-time

The default for M&A, provider exits, and clean tenant consolidations up to a few hundred mailboxes.

  • Mailbox + OneDrive migration
  • Groups & distribution lists
  • Full AI planner & wave orchestration
  • DNS automation (all records)
  • 90-day safety net & rollback
  • Business-hours support
Buy Standard
Teams + SharePoint

Premium

$9/user · one-time

Adds the heavier Microsoft 365 workloads — Teams, Planner, SharePoint sites, and the permissions that come with them.

  • Everything in Standard
  • Teams chat + channels + tabs
  • SharePoint sites + site permissions
  • Planner, Lists, OneNote notebooks
  • Shared mailboxes + delegates
  • Priority support · 4-hr response
Buy Premium
Regulated & complex

Pro

$12/user · one-time

For regulated industries, multi-geo tenants, and migrations where failure isn't an option.

  • Everything in Premium
  • Compliance + retention policy carry-over
  • Archive mailboxes + litigation hold
  • Multi-geo / multi-domain tenants
  • Dedicated migration engineer
  • 24×7 support + on-call cutover
Talk to sales
How it works

One-time, per-user, per-migration. Licenses are scoped to a single cutover window with a validity date — e.g. 50 users × $6/user = $300 one-time. Extend the window any time before expiry; add more seats mid-migration without a renewal. Volume pricing kicks in above 500 seats.

Bring your next tenant migration to us.

Forty-minute walk-through with a migration engineer — not a sales deck. We'll scope your wave plan, DNS posture and cutover window on the call, then send you a one-page readiness brief the same day.

Book a demo · contact@yantran.io →
Allen, TX825 Watters Creek Blvd, Building M, Suite 250 · 75013 Phone972.872.8338 Also inUAE · Singapore · APAC