Should a Google Workspace Subsidiary Move Into Our Microsoft 365 Tenant or Stay Hybrid?

0
6
Asked By MellowCedar47 On

Our parent company uses Microsoft 365 and Entra ID, while a roughly 100-user subsidiary relies entirely on Google Workspace. I'm the only IT administrator, and the subsidiary needs to come under our Conditional Access and device-compliance policies.

I'm considering three approaches: fully migrating the subsidiary into the existing Microsoft 365 tenant and managing devices with Intune; keeping Google Workspace for mail and collaboration while provisioning Entra identities and Intune licenses for the users and devices; or replacing the Microsoft-native approach with a third-party identity and MDM platform.

For anyone who has managed a setup like this in production: does the hybrid identity model remain maintainable, or does it eventually become technical debt? And if you completed a full migration, how much user disruption did you experience compared with your initial expectations?

4 Answers

Answered By NimbleFox31 On

Start with an inventory: export the Google users, licenses, last-login data, shared drives, calendars, and external sharing relationships, then reconcile that with existing Entra accounts. If you choose hybrid, set a firm review or retirement date so the second environment doesn’t become permanent by accident.

For users, the biggest disruption usually isn’t the background data copy. It’s the cutover to a different mail client, new file locations, calendar behavior, and unfamiliar workflows. Incremental migration passes and clear training reduce that impact. Also decide in advance when unused Google licenses will be removed so the old environment doesn’t remain an expensive safety net.

Answered By QuietHarbor29 On

The hybrid route can work as an interim design. Google Workspace can be federated with Entra so users authenticate through the identity platform and are subject to Conditional Access, while they continue using Gmail and Drive. I’d pilot that with a small group first, then decide whether mail and files should move later.

Be aware that a Drive migration and an email migration are separate projects. Shared drives, permissions, external collaborators, calendars, and user retraining often cause more trouble than the actual file transfer. A staged approach lets you prove the identity and compliance pieces without forcing every change at once.

Answered By BrightOtter6 On

If the long-term direction is Microsoft 365, a full migration is probably the cleanest answer. The work is significant, but maintaining two identity and collaboration platforms tends to create ongoing licensing, support, and policy complications. Since you’re handling this alone, bringing in an experienced consultant for planning and cutover would be worthwhile rather than trying to run the entire project alongside normal operations.

Answered By AmberKite88 On

I’d be cautious about adopting a third-party MDM solely to postpone a Microsoft 365 migration. It could make sense if you have a genuine cross-platform requirement, but otherwise you may be paying for another management layer while still needing to solve identity integration. A small test group is a good way to compare enrollment, compliance reporting, and support overhead before committing.

Related Questions

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.