DMC (Dr Migrate Collector)

⚠️
Support for deploying DMC via the Azure Marketplace to Marketplace will be coming in August.

Prerequisites Checklist

Before proceeding with DMC deployment, ensure the following prerequisites are in place:

Requirement Learn More
Complete Marketplace Infrastructure Setup. Learn More
Complete Azure Migrate Project Configuration. Learn More
Complete Fabric (Power BI) Configuration. Learn More
Ensure DMC system requirements are met. Learn More

Marketplace Infrastructure Setup

Permissions Required

ℹ️
Ideally the user performing the following steps should have the Global Administrator role.

If this is not possible, the least privileged approach requires the following permissions:

  • Application Admin
  • Groups Admin
  • Subscription Owner
  • Fabric Admin
  • Marketplace Admin
  • User Access Administrator

For more information about least privileged role assignment in Azure, see the Microsoft Learn Portal.

Verify the Target Subscription is not of type CSP

The target subscription is where the Dr Migrate solution will be deployed. This is usually the same subscription and resource group as Azure Migrate.

You can check if a your subscription is managed by a CSP using the Azure Resource Graph Explorer. Run the following command:

resourcecontainers
| where type== "microsoft.resources/subscriptions" 
| project subscriptionId, name, properties.subscriptionPolicies.quotaId 

If the target subscription returns a quotaId of “CSP_2015-05-01” or contains the phrase , you will need to request that the Dr Migrate team (support@altra.cloud) make an alternative version of Dr Migrate available.

Create a New Azure Migate Project

Azure Migrate is a mandatory prerequisite for Dr Migrate. You need to create an Azure Migrate project to enable data collection and assessment capabilities.

  • An active Azure subscription
  • Appropriate permissions to create resources in your Azure subscription
  • A resource group where the Azure Migrate project will be deployed
Click here for detailed instuctions

Sign in to Azure Portal

Search for Azure Migrate

  • In the search bar, type “Azure Migrate”
  • Select Azure Migrate from the search results

Create New Project

  • Click Create or Add to start creating a new Azure Migrate project
  • Select your Subscription and Resource Group
  • Choose a Project name (e.g., “MyMigrationProject”)
  • Select your Geography (the region where your project metadata will be stored)

Configure Project Settings

  • Assessment tool: Select “Azure Migrate: Discovery and assessment”
  • Migration tool: Select “Azure Migrate: Server Migration” (if needed)
  • Click Create to deploy the project

Verify Project Creation

  • Once deployed, navigate to your Azure Migrate project
  • Note down the Project name and Resource Group for use with Dr Migrate
ℹ️
The Azure Migrate project must be created in the same subscription and resource group where Dr Migrate will be deployed
ℹ️
Ensure the project has the necessary permissions to collect data from your on-premises environment
⚠️
No Azure Migrate Appliances can be attached to the Azure Migrate Project
ℹ️
The project will serve as the data source for Dr Migrate’s migration assessment capabilities

For detailed step-by-step instructions, see the Microsoft Learn documentation.

Create Service Principal

Dr Migrate requires a Service Principal to communicate with Azure Migrate and Power BI.

Service Principal Creation Guidelines:

  • SPN Name: It is recommended to name the App Registration “drmigrate-spn”
  • Client Secret Creation: Dr Migrate requires a client secret with 12-month expiry recommended
ℹ️
Securely store the Client Secret value, as it is only viewable on creation and will be needed during the marketplace installation.

For Microsoft documentation on creating a Service Principal in Entra ID, see here.

Configure SPN Access

Best practice is to set up Azure Migrate and Dr Migrate in a dedicated Resource Group and/or Subscription. This provides a clear RBAC boundary and reduces Azure Policy conflicts.
ℹ️
Dr Migrate will ingest all Azure Migrate Projects located within the resource group the SPN has permissions to. If you do not wish to have a project ingested, ensure that the Azure Migrate project has been created in a dedicated resource group.

Assign your Service Principal the following permissions:

Role Scope Reason Required Requirement
Contributor Subscription or Resource Group where Dr Migrate and Azure Migrate will be located Used to collect Azure Migrate data Mandatory
Cost Management Reader Subscription where Azure Migrate is deployed. Used to customer specific price sheet Optional
ℹ️
If you have an Enterprise Agreement with Microsoft, and would like Dr Migrate to apply your agreed discount when providing TCO costings, the Cost Management Reader role is required

Learn more about how to assign RBAC roles here.

Create a Security Group for the Service Principal

ℹ️
Access to Power BI tenant settings are regulated by security groups. A security group is required to manage the Dr Migrate SPN Power BI access.

Create a security group to house the Service Principal and assign Power BI permissions:

  • Group Name: It is recommended to name the Security Group “drmigrate-powerbi”
  • Group Membership: The Service Principal should be added as a member of the security group
Creating a new security group

Create a new security group with the recommended name

Adding service principal to security group

Add the service principal as a member of the security group

To learn more about how to assign access to Entra ID Security Groups, see here.

Audit Azure Policy

When Dr Migrate installs, it deploys Azure resources to a managed Resource Group. These resources may be subject to Azure policy.

To mitigate deployment failures, temporarily exempt policies at the Subscription level that have the following effects:

  • Append
  • DeployIfNotExists
  • Deny
  • Modify

To learn how to exempt Azure Policy from resources, see here.

Azure Migrate Project Configuration

Review Azure Migrate Project Connectivity Method

ℹ️
Setting the Connectivity Method to Public Endpoint is recommended for the smoothest experience.

If Private Endpoint must be used then additional configuration steps are required. See Private Endpoints for more information.

Microsoft also has documentation for those seeking further information, see here.

Azure Migrate Appliance Connection

Azure Migrate appliances must not be connected to this project. DMC does not currently support environments with Azure Migrate appliances.

Fabric (Power BI) Configuration

Configure settings in the Power BI tenant

Head to Power BI Admin Portal to configure access to the Power BI settings for the Security Group containing the Service Principal.

From the left-hand side menu select Tenant Settings. You will be presented with a list of options that need to be configured.

Most of these settings need to be enabled. You can either have this at the organizational level or specify the Dr Migrate Security Group.

Configure the following settings:

Workspace settings -> Create workspaces (new workspace experience)

Power BI workspace settings

Configure workspace creation settings

Developer settings -> Service principals can create workspaces, connections, and deployment pipelines

Power BI Fabric API settings

Service principals can create workspaces, connections, and deployment pipelines

Developer settings -> Embed content in apps

Power BI embed content settings

Configure embed content in apps settings

Developer settings -> Service principals to use Fabric APIs

Power BI Fabric API settings

Configure service principal access to Fabric APIs

Export and sharing settings -> Export to Excel

Power BI Excel export settings

Configure Excel export settings

Export and sharing settings -> Export to .csv

Power BI CSV export settings

Configure CSV export settings

Export and sharing settings -> Export reports as PowerPoint presentations or PDF documents

Power BI PowerPoint export settings

Configure PowerPoint and PDF export settings

Power BI visuals -> Add and use certified visuals only. This setting needs to be configured to the Disabled state.

Power BI tenant admin settings switch

Enable tenant administration settings

Power BI visuals -> Allow visuals created using the Power BI SDK.

Power BI tenant admin settings switch

Allow visuals created using the Power BI SDK

Required Visuals Instaltion

The Network Navigator visual is required for advanced dependency mapping functionality within this report. To ensure full feature availability for all users, it must be installed into the Organizational Visuals section of Power BI.

⚠️
The Network Navigator visual is not available from the AppSource marketplace. It is exclusively distributed via GitHub and should always be installed from there.
  1. Download the .pbiviz file from the Network Navigator GitHub repository.

  2. As a Fabric Admin, access the Power BI Admin Portal.

  3. Navigate to Organizational Visuals.

  4. Select Add a custom visual, then choose Upload from file.

  5. Browse to the downloaded .pbiviz file and upload it.

  6. Once uploaded, the visual will be available for all users in your organization via the Organizational Visuals pane in Power BI.

⚠️
If your environment is configured to restrict certified visuals, it is mandatory to add the needed visuals to your Organizational Visuals section. Failure to do so will mean some visuals will not function as needed. Please see our guide on enabling Power BI visuals.

Gateway Administration

Dr Migrate uses an On-Premises data gateway as part of the solution.

Within the Power BI Admin Center, navigate to “On-Premises data gateways” in the central panel.

Enable the Tenant Administration Settings using the switch on the right-hand side.

Power BI tenant admin settings switch

Enable tenant administration settings

Enabling this will show the “Manage Gateway Installers” option.

Power BI gateway admin button

Access gateway installer management

Ensure that the “Restrict users in your organization from installing gateways” setting is set to Off.

Power BI gateway restriction settings

Configure gateway installation restrictions

⚠️
This setting needs to be turned off for Dr Migrate to install.

If the restriction is set to “On” it is recommended:

  • Turn this setting to “Off” while the Dr Migrate product is installing
  • Turn the setting back “On” 60 minutes post installation.

Next Steps

After completing the scan, you can: