Cutover
The cutover phase finalises the migration by switching DNS, reconstructing permissions, and regenerating Teams meeting links.
DNS cutover
TenantLift guides you through the SMTP cutover:
- Update MX records to point to the target tenant
- Update SPF, DKIM, and DMARC records
- Verify mail delivery to the target mailboxes
Permissions reconstruction
After mailbox content is migrated, TenantLift reconstructs:
- Send-as rights
- Send-on-behalf permissions
- Full Access delegation
- Folder-level permissions (calendar sharing, inbox delegates)
These are re-created using the identity map to translate source → target users.
Teams meeting links
TenantLift regenerates Teams meeting links in migrated calendar events so they point to the correct target tenant Teams instance.
Validation
After cutover, run the built-in validation checks to confirm:
- Mail is flowing to the target mailboxes
- Calendar events are accessible
- Permissions are correctly applied
- No orphaned references remain