One organization, any number of people, three roles. This page covers who can do what, how to invite colleagues, and what to do when signing in goes wrong.
Roles
| Role | Can | Cannot |
|---|---|---|
| Owner | Everything: projects, tenants, migrations, cutover, licenses and orders, the team, notifications | — |
| Operator | Create projects, connect tenants, run assessments, match users, start passes, retry, verify, cut over | Buy licenses, invite or remove people, change roles |
| Viewer | See every project, progress, findings, items that need a look, the report | Change anything |
An organization always keeps at least one owner. Give operators to the people running the move and viewers to sponsors and project managers who want to follow along.
Inviting people
- Team → Invite someone. Name, work email, role. They get an email with a link to choose their own password; the link is valid for 72 hours.
- Until they sign in they show as Invited. Re-send by removing and inviting again if the link expired.
- Change a role any time from the list — it applies at their next request.
- Remove someone and their sign-in stops at once. Projects, history and the audit log stay.
Two-step sign-in
Settings → Two-step sign-in. Scan the QR code with any authenticator app (Microsoft Authenticator, Google Authenticator, 1Password, Authy…) and type the six-digit code once to confirm. Save the recovery codes: each signs you in once if you lose the device. An account that can reach two tenants deserves this — turn it on before connecting anything.
When signing in goes wrong
| You see | It means | Do this |
|---|---|---|
| That code isn't right (two-step) | The code expired, or the phone's clock is off | Wait for the next code and type it straight away; set the phone's time to automatic. Or use a recovery code |
| Lost the authenticator | No way to produce a code | Sign in with a recovery code, then Settings → turn two-step off and on again with the new device. No codes left: an owner cannot reset it — contact us with proof of ownership |
| Confirm your email address first | Sign-up isn't finished until the link in the confirmation email is opened | Check the inbox (and spam) for the link — valid for 60 minutes. Trying to sign in sends a fresh one |
| Forgot the password | — | Forgot password sends a reset link valid for one hour |
| Too many attempts | Sign-in is rate-limited after repeated failures | Wait the minutes shown, then try again |
| Your organization is suspended | MigrateX staff paused the account | Check email from us, or contact us |
| Invitation link expired | More than 72 hours passed | Ask an owner to remove and re-invite you |
How long does a migration take?
- Connecting and assessing: ten minutes for the account and consent; the assessment takes a few minutes on large tenants.
- Mailboxes: most finish in minutes to an hour or two. Very large ones (50 GB and up) are throttled by the platform to a day or more — start them first.
- Files, sites and Teams: proportional to size; hundreds of gigabytes take a day, and everything runs in the background while people keep working.
- Delta passes: minutes, because only new and changed items travel.
- Cutover: one evening. The data is already there; the window is for forwarding, DNS and the final delta.
Rule of thumb.Plan a pilot week, a migration week per few hundred people, and one cutover evening. Nothing is lost if it takes longer: the source stays live until you cut over.