Permissions Required by Fly

The table below lists the permissions that should be accepted when you authorize the AvePoint Fly Migration app.

API Requirements

API RequirementsGoogle Scopes PermissionPurpose
Gmail APIhttps://www.googleapis.com/auth/gmail.readonlyRetrieve mails and labels, including data and properties.
Gmail APIhttps://www.googleapis.com/auth/gmail.settings.sharingUsed to enable email forwarding.
People APIhttps://www.googleapis.com/auth/contacts.readonlyRetrieve contact groups and contacts.
Google Task APIhttps://www.googleapis.com/auth/tasks.readonlyRetrieve all tasks.
Admin SDK APIhttps://www.googleapis.com/auth/admin.reports.usage.readonlyRetrieve size usage of users.
Admin SDK APIhttps://www.googleapis.com/auth/admin.directory.resource.calendar.readonlyRetrieve resource calendars.
Admin SDK APIhttps://www.googleapis.com/auth/admin.directory.user.readonlyRetrieve source users.
Admin SDK APIhttps://www.googleapis.com/auth/admin.directory.group.readonlyRetrieve source groups.
Google Calendar APIhttps://www.googleapis.com/auth/calendarRetrieve calendars and events.
Google Drive APIhttps://www.googleapis.com/auth/drive.readonlyRetrieve event attachments.
Photos Library APIhttps://www.googleapis.com/auth/photoslibrary.readonlyRetrieve Google Photos information.
Enterprise License Manager APIhttps://www.googleapis.com/auth/apps.licensingUsed to retrieve license information.

Admin Account Permissions

TypeAdmin Account PermissionPurpose 
GmailUsers > ReadMigrate Gmail mailboxes.
GmailCalendar > All Settings > Buildings and Resources > Room InsightsMigrate Gmail mailboxes.
GmailGroups > ReadMigrate Google groups.
GmailReportsRetrieve source data.
GmailMake changes to events permission to the calendar, or assign the Super Admin role to the Admin account.Migrate private calendar events in the resource mailbox.
Google DriveUsers > ReadMigrate user drives.
Google DriveDrive and Docs > SettingsMigrate shared drives.
Google DriveContent manager of Shared DriveMigrate shared drives.*Note: If you do not want to give the content manager access to the Admin account, you can ignore this requirement, but there must be a content manager or manager in the shared drive.