Skip to content
CAMPUX Cloud Bootcamp
Field notes · Migration
Migration Communication Plan

A tenant migration is a comms project with an engineering task attached

By Captain O7 min read

The mailbox move almost always works. What sinks a tenant-to-tenant migration is a person who found out too late — the department head who booked a launch on cutover weekend, the security lead who saw the new tenant only when the alerts fired. The engineering is the easy half.

New to cloud? CAMPUX is a free, build-first course. Start here →

Moving a Microsoft 365 tenant into another one — after an acquisition, a divestiture, a consolidation — is part of the Azure tenant-to-tenant migration guide, and Microsoft's own planning page treats it as an exercise in identity mapping, workload sequencing and coexistence. All true, all necessary. But the plan that decides whether Monday goes smoothly is the one nobody puts in the architecture diagram: who you tell, what you tell them, and when. Get the comms wrong and a flawless migration still lands on the service desk as a day of chaos.

Match each message to the reader’s altitude — summary at the top, specifics and timing at the coalface.executive sponsorsummary · dashboardIT + securityplan · runbookservice desktiming · what users feeldepartment headstheir windowend usersign in Monday?altitude of the messagematch the reader
Figure 1 — A tenant migration is a communications project with an engineering task attached. Seniority wants a summary and a dashboard; the coalface wants specifics and timing; the end user only wants to know they can sign in on Monday. Match the altitude of each message to its reader and pick the channel they already live in, and the migration stops generating surprises.

The same event means different things to different people

Everyone in the org is affected by the migration, but almost nobody cares about the whole of it. The executive sponsor wants to know the business is protected — is the timeline holding, is there a risk to the deal, what does a slip cost. The infrastructure team wants the mechanics: batch order, coexistence for mail routing and free/busy, licensing in the target tenant, the rollback if a batch stalls. Security wants to know the new tenant's conditional access and MFA posture before it goes live, not after. Department heads want to protect their own calendars — do not move my team the week we close the quarter. And the end user, the largest audience by far, cares about exactly three things: can I sign in Monday, can I find my mail, can I reach my colleagues.

One all-staff email that tries to serve all five of those readers serves none of them. The sponsor drowns in batch mechanics; the end user glazes over at coexistence and never sees the one line that matters to them. The job is to write a different message for each audience and pick the channel that audience actually opens.

Match the altitude to the reader

Seniority reads at altitude. An executive sponsor wants a one-page dashboard: green/amber/red, the cutover date, the top risk, the decision you need from them. Put a cmdlet in front of a sponsor and you have wasted the only attention you will get. The coalface reads the opposite way — the infra and service desk crews want specifics and timing, the runbook, the exact window, the fallback. The higher you go, the more you summarize; the closer to the work, the more concrete you get.

Seniority wants the summary. The coalface wants the timing. Never swap them.

Channel follows altitude too. Sponsors and department heads get a short briefing or a steering-committee slide, not a firehose. IT and security live in the ticketing system and a shared runbook. End users get a plain email and a pinned Teams post — and, for the ones who never read either, a poster by the coffee machine and a heads-up through their manager. The service desk gets its own thing entirely: a rehearsed script and a known-issues sheet so the first caller Monday morning does not become a research project.

The pre-cutover notice sequence

You do not tell people once. Microsoft's guidance and every seasoned migrator lands on the same shape: a countdown, working backward from the moment users move. A workable T-minus rhythm for end users looks like this. Two weeks out: this is happening, here is why, here is the date, nothing to do yet. One week out: here is what will change for you specifically and the actions you will take. The day before: tonight we begin, here is your new sign-in address and the number to call. Switch-day morning: we are live, here is the one thing to do first. Then a done signal when their mailbox move completes.

The repetition is not padding. Every notice catches the slice of people who ignored the last one, and each one shaves calls off the Monday spike. The single most useful thing you can hand the service desk is a population that was told four times.

What switch-day looks like to a user

Tie the words to the events. When the migration window opens, tokens are revoked and users are signed out of everything — so tell them plainly they will be signed in again, and give the new sign-in address if the domain changes. If the target tenant uses Microsoft MFA, they re-register their authenticator; a clean way to bootstrap that is a Temporary Access Pass, a short-lived one-time code the service desk issues so a user with no working second factor can still get in and set one up. Their mailbox moves in a window, so recent mail can lag until the move finishes. Three concrete facts — new address, re-register MFA, mail catches up shortly — beat a page of reassurance.

A surprise is the failure mode

Watch how these go wrong and it is rarely the copy tool. It is a stakeholder blindsided. The department head who booked a product launch on the weekend you chose, because the date was never run past them. The security team that meets the new tenant when unfamiliar sign-ins start tripping alerts. The service desk that gets the sign-in flood with no runbook, so every call is solved from scratch. None of those is an engineering fault — every one is a comms fault, a person who should have been in the loop and was not.

So build the plan as a stakeholder map first and a schedule second. List every audience, write down what each one needs to know and decide, name the channel, and confirm the reply before you commit to a cutover date. Circulate the date to department heads and let them veto a bad weekend while it is still cheap to move. Treating the comms plan as the risk control — not the paperwork you do after the real work — is the difference between a migration people barely notice and one they talk about for a year.

The takeaway

A tenant-to-tenant migration is a communications project with an engineering task bolted on. Map the audiences — sponsor, infra, security, service desk, department heads, end users — and give each the message and the channel it needs, pitched at the right altitude. Run the notices as a countdown, not a single email. Keep the end user's three questions in view: can I sign in, can I find my mail, can I reach my colleagues on Monday. And treat every stakeholder surprise as the defect it is. The mailbox move is the part that is guaranteed to work. The people are the part you have to plan for.

Questions people also ask

What should a tenant-to-tenant migration communication plan include?

It should cover why the migration is happening, who is affected, the timeline, any expected outages, the exact actions each person must take, and where to get help. The trick is not writing one message for everyone — it is writing different messages for the executive sponsor, IT, security, the service desk, department heads and end users, and sending each on the channel that audience reads.

What changes for end users during a tenant migration?

Users get signed out when their tokens are revoked and have to sign in again, often at a new address. If the target tenant uses Microsoft MFA, they re-register their authentication method — frequently bootstrapped with a Temporary Access Pass, a short-lived one-time code the service desk hands out. Their mailbox moves in a defined window, so recent mail can lag until the move completes.

How far in advance should you tell users about a migration?

Send information more than once on a countdown working back from cutover — a common pattern is a T-minus schedule with notices at roughly two weeks, one week, the day before, and switch-day morning. One email is never enough. Repetition is how you reach the people who ignored the first notice, and it lowers the call volume that hits the service desk on Monday.

Why do tenant-to-tenant migrations fail?

The technical move usually works. What fails is a stakeholder being surprised — a department head who books a launch on cutover weekend, a security lead who first hears of the new tenant when alerts fire, a service desk with no runbook for the flood of sign-in calls. Migrations fail on the org chart, not the mailbox move, so the comms plan is the risk control.

How long does a tenant-to-tenant mailbox migration take?

Throughput depends on mailbox size, user count and data volume, so give people a window rather than a promise. A single large mailbox can take hours, and a batch can run overnight or across a weekend. Tell users their recent mail may briefly lag during the move window, and give a clear signal for when the move is done and it is safe to work.

Further reading — the Microsoft docs
Your next class · free
You've read the idea. Class 7 — Entra ID, Subscriptions, Groups is where you build it, hands-on — no account needed.Start Class 7 →
Captain O
Founder & instructor · CAMPUX Cloud Engineering Bootcamp
Part of the tenant-to-tenant migration field manual. Back to all field notes →