Layer by layer

Four workload layers, one plan on top.

Each layer is a module you can deploy on its own, for example to fix SharePoint sharing or get ready for Copilot, or together for a full migration.

  1. Brings it together

    Project Management

    Waves, tasks, risks and communications in one plan, with one body of evidence for migration, security and Copilot decisions.

  2. Layer 4

    Power Platform

    The apps and flows the business relies on, often invisible until they break in a migration.

  3. Layer 3

    SharePoint

    Sites, sharing and permissions: where oversharing hides, and why it matters for Copilot.

  4. Layer 2

    Outlook

    Mailboxes, shared mailboxes and delegation, the quiet complexity in every migration.

  5. Layer 1

    Users and Groups

    Who exists, who has access, which accounts are stale. Everything above depends on it.

Stage 1

Plan

See what each wave will affect, clear out what nobody needs, and ask the record questions in plain English.

Planning

Before a wave is signed off, you can see what it will affect.

Discovery exports arrive one workload at a time, and plans inherit the split, twice over when a merger or an acquisition brings two tenants together. Novalysis reads users, mailboxes, OneDrive, SharePoint, Teams, groups and Power Platform into one record and keeps it current as the tenant changes.

Waves are built around teams and departments. The wave planner keeps a department’s members together, and can do the same for the members of a Team, the people who share a mailbox and the members of a SharePoint site. A dependency check on a wave then pulls in the shared mailboxes, Teams and sites its people use.

Novalysis links Power Apps and Power BI to the SharePoint sites, lists and files they depend on, and unpacks the Power Automate flows between them to find the mailbox each one watches or sends from. You can see which apps a wave will affect, how many people use them and who owns them. The Power Platform part needs a one-off registration by a Power Platform admin.

Facilities helpdesk

Wave 2 · Tue 3 Mar · moving together

What the team relies on

  1. Shared mailbox facilities@ Used by all 7
  2. Team Facilities In Microsoft Teams, with its site
  3. Power App Room bookings Reads the Rooms list · used by 12 people · owner K. Adeyemi
  4. Flow Booking confirmations Sends from bookings@ when a room is booked
  5. Shared mailbox bookings@ Added to wave 2 on 12 Feb

Scope history

  1. bookings@ added to wave 2

    S. Brennan, migration lead, through the assistant · The Room bookings flow sends confirmations from it.

  2. Facilities requests (old) site left out

    S. Brennan, migration lead · from the review queue · No activity for 18 months.

Read from your tenant · updated 06:10 today

One team’s wave in Novalysis, after the change the assistant proposed below. Illustrative.

Clearing out

Rules flag what could be left behind, for someone to review.

Rules start from templates and run on a schedule, and what they find goes into a review queue. They find inactive mailboxes, sites, Teams, groups, OneDrives and accounts, and mailboxes too large to move as they are or on litigation hold. They also find people with a desktop Office licence who haven’t opened a desktop Office app in six months, who are candidates for a web-only licence.

That licence list is a starting point. Someone still needs to check for the people who rely on desktop Access, or on an Excel add-in the web apps can’t run.

The assistant

The assistant answers from the record, and proposes changes for a person to approve.

Most questions about a migration take several lookups: who is in the wave, what they use, which rules they trip and what the plan says about each of those things. The assistant does the lookups in order, shows the steps it took, and tells you what it found in plain English.

It can act as well, within limits you set. It proposes scope changes and schedules emails from your templates, and each plan waits for someone with the right role to approve it. An approved change goes into the item’s scope history, with the assistant named and the reason it gave.

It can only use the tools the asker’s role allows, and it runs on Azure OpenAI in your own subscription.

Assistant

Wave 2 · Tuesday 3 March

  1. S. Brennan

    Does the Facilities team rely on anything that isn’t in wave 2?

    • Looked up the Facilities team: 7 people in wave 2
    • Checked the apps, flows and mailboxes they use
  2. Assistant: One thing. The Room bookings app has a flow that sends confirmations from bookings@, and bookings@ isn’t in any wave. If wave 2 moves without it, confirmations stop on Tuesday 3 March.

  3. S. Brennan

    Add bookings@ to wave 2.

    • Proposed a change to wave 2
  4. Assistant:

    Change a wave

    Waiting for you

    You are about to add the shared mailbox bookings@ to wave 2.

    Reason it records
    The Room bookings flow sends confirmations from it.
    When you approve this card
    bookings@ joins wave 2, and the reason goes into its scope history.
A question about one team’s wave, and the change it leads to. Illustrative.

Stage 2

Tell people

One campaign for every wave, and a page in Teams where each person sees their own move.

Communications

A campaign is set up once and runs for every wave.

Without one, the comms team sends each message to each wave by hand: copy the last wave’s email, change the date, paste in this wave’s names, check nobody has changed wave since, send, and start again when a date moves.

In Novalysis a campaign is a set of steps timed from the wave’s date: an announcement four weeks out, say, then two weeks to go, one week to go, the day itself and help on the first day. Every wave gets the same steps on its own dates, and when a wave moves, its emails move with it. Templates keep a version history and fill in each person’s details, such as their new address and their date. Each draft is checked for reading age and length against limits you set, and the AI can rewrite it to be shorter, more reassuring or less formal.

You can see who each step will reach, require two different people to approve it, and skip people who have already done what it asks, such as activating their new account. Everything is sent from your own mailboxes, through your own Microsoft 365.

Campaign

Your move to the new tenant

Runs for every wave, timed from each wave’s date

Steps

  1. 28 days before Announcement
  2. 14 days before Two weeks to go
  3. 7 days before One week to go
  4. On the day Move day
  5. 1 day after First day help

Waves

WaveDateSteps sentNext
Wave 1Tue 10 Feb5 of 5 sentAll sent
Wave 2Tue 3 Mar2 of 5 sentNext: 24 Feb
Wave 3Tue 17 Mar1 of 5 sentNext: 3 Mar
Wave 4Tue 31 MarMoved from 24 Mar0 of 5 sentNext: 3 Mar

Sent from [email protected], through your own Microsoft 365

One campaign, running for every wave on its own dates. Illustrative.

What staff see

Nothing reaches the staff page until someone releases it.

Announce a new address before it works and people ring to ask why, and a list of shared mailboxes only helps once it’s right. So you release each wave’s details to the staff page yourself, once they’re right, usually as its email goes out.

You choose what the page lists: just the person’s own account, mailbox and OneDrive, or everything moving with them, from shared mailboxes and the distribution lists they belong to or own, to Teams, Microsoft 365 groups and SharePoint sites. You can also tell people what isn’t moving. Before releasing, you preview the page as someone in the wave and confirm the details have been approved. A release can be withdrawn, and each one is kept in the release history.

Release new account details

Wave 2 · Tuesday 3 March

Release to
Wave 2 · 7 people
What it lists
Choose…

Things to show

  • Shared mailboxes (not shown)
  • Email groups (distribution lists) (not shown)
  • Teams and Microsoft 365 groups (not shown)
  • OneDrive (not shown)
  • SharePoint sites (not shown)
  • Things that are not moving (not shown)

Preview as a person

Daniel Price, FacilitiesOpen their page

I’ve checked a preview and these details have been approved for release (not ticked)

Release history

  1. Wave 1 · everything that moves with them

    S. Brennan, migration lead

Wave 2’s new account details, about to be released to the staff page. Illustrative.

The staff page

Each person sees their own move, in Teams.

Programme emails describe the whole migration, and most people only want to know what happens to them. Their page shows their move date with a countdown, their new address, what’s moving with them, a short checklist and every email they’ve been sent, so anyone who missed one can still find it. It warns them if their mailbox is too large to move, and tells them when their date changes.

The page is your own app in Microsoft Teams, with your name, logo and colours, so staff aren’t sent to yet another site, and it opens in a browser too. You choose who can sign in: nobody yet, selected waves or Entra groups, or everyone.

An assistant answers their questions from your FAQs and their own move, in terms that fit their job: what happens to the room bookings, whether their phone needs setting up again. It runs on Azure OpenAI in your subscription, and the service desk is left with the questions that need a person.

Larkfield move

Your move, Daniel

Tuesday 3 March

In 12 days

Your new email address[email protected]

What’s moving with you

  • Your mailbox · 3.9 GB
  • Your OneDrive · 1.2 GB
  • Shared mailbox: facilities@
  • Team: Facilities
  • Distribution list you own: facilities-all

Before then

  • Check you can sign in (done)
  • Read your mailbox plan (done)
  • Clear out your OneDrive

Emails we’ve sent you

  1. Two weeks to go: what’s moving with youNew
  2. Your move to the new tenant: Tuesday 3 March

Ask a question

Will room bookings still work on the day?

Yes. Room bookings moves with your team in wave 2. It’s unavailable from 6pm on Monday 2 March until 8am on Tuesday, and bookings already made will still be there.

Service desk: 020 7946 0958, 8am to 6pm

Daniel’s page, in your branded app in Microsoft Teams. Illustrative.

Stage 3

Prove it

Every scope decision recorded on the thing it’s about, with sign-off before anything moves.

Afterwards

Every scope decision stays on the page of the thing it’s about.

In a spreadsheet, decisions end up in a Notes column, in one copy, often among the files of whoever ran the project. In Novalysis every change of scope records who made it (a person, the assistant, a rule, or “automatically because…”), when, why and where it was made. Renames are kept the same way, so a site’s page shows what it used to be called and why that changed. The history is append-only and never purged, and it appears on each user, mailbox, OneDrive, group, Team, site, Power App and flow.

A wave can’t be exported until it’s signed off. The sign-off goes out by email and keeps a fixed snapshot of what was in scope and what was left out, each exclusion with its reason, along with the approver’s name and title, their response and the date.

Project decisions go in the decision log, one of the RAID registers, with the options, the criteria, the rationale, the approver and a date to review it, and the whole log can be exported. All of it stays in your Azure subscription when the consultancy moves on, for as long as you keep Novalysis.

NovalysisTo: R. Hall, Director of Estates

Sign-off needed: wave 2, Tuesday 3 March

Please review what moves in wave 2 and what stays behind. Nothing in this wave can be exported until it’s signed off.

Moving

  • 7 people, with their mailboxes and OneDrives
  • Shared mailboxes: facilities@ and bookings@
  • Team: Facilities, with its site
  • Power App: Room bookings, with its flow

Left out

  • Facilities requests (old)No activity for 18 months. Requests moved to Room bookings in 2024.
  • Estates photos 2015-2018Moved to the records store before the migration.
Approved

R. Hall, Director of Estates ·

Agreed. Keep the old requests site read-only until April.

The snapshot is kept with the wave in your Azure subscription

A wave’s sign-off: what moves, what was left out and why, and who approved it. Illustrative.

Stage 4

Beyond migration

The same record and the same campaigns for Copilot and any change staff have to act on.

Copilot

Copilot goes to each department once its sites are ready.

Novalysis reads SharePoint permissions down to individual files and list items, keeps an inventory of sharing links, and shows who gets access, broken down by department. When the files in one folder keep being shared with the same few people, it treats them as a working group. It then suggests a place of their own: a restricted library, a private team in Microsoft Teams, or a space shared with the department they work with.

Each site gets a Copilot readiness score and a state, from blocked to enabled, and its owner gets a plan of what to fix. Causes that sit in tenant settings, such as the default sharing link, are picked out separately, because fixing those site by site only lets them grow back. Then each department gets Copilot, announced with the same campaigns and staff page as a migration.

Copilot readiness

Finance and Estates

Sites

  • Finance hub Enabled Enabled 12 May. No open issues.
  • Estates projects Blocked A folder shared with everyone in the organisation. The site owner has a plan to fix it.
  • Contracts Pending review 40 site owners, so 40 people can open everything in it

Causes in tenant settings

  • New sharing links default to everyone in the organisationChange the default to specific people. Fixing it site by site only lets it grow back.

Site owners and your SharePoint admins make the fixes

Copilot readiness, site by site, with a cause that sits in a tenant setting. Illustrative.

Not only migrations

Any change staff have to act on runs the same way.

An MFA rollout, a new sign-in method, a device policy or Copilot reaching a department has the same shape as a migration: groups of people, a date for each group, something each person has to do, and a service desk waiting for the ones who didn’t. Novalysis runs them with the same cohorts, campaigns, staff page and assistant. Its reminders can skip the people who have already done what’s asked, such as setting up MFA.

Stage 5

How it fits

Exports to the migration tool you already use, room for your consultancy, and your own Azure subscription.

The moving

Once a wave is signed off, it goes to the tool that does the moving.

Novalysis plans the moves and leaves the copying of mail, sites and files to the migration tool you already use. Each signed-off wave exports as a ready-made file for that tool, or as generic CSV or JSON for anything else.

Ready-made exports for

  • Quest
  • ShareGate
  • BitTitan
  • CodeTwo

For migration consultancies

When you hand over, the record stays with your client.

If your client runs Novalysis, your team can work inside their instance, with accounts the client issues and can remove at any time. Nobody on your side needs a copy of the tenant on their laptop. When you move on, the plan, the sign-offs and every scope decision stay in the client’s subscription, for as long as they keep Novalysis.

Where it runs

Novalysis is deployed into your own Azure subscription.

It’s installed from the Azure Marketplace as a managed application. Your tenant data, plans and decisions are stored in your subscription, in Azure SQL with Entra-only sign-in, alongside AI Search, Key Vault and Azure Web PubSub for live updates. The assistant uses an Azure OpenAI resource in the same subscription. If that resource uses a Global Standard deployment, Microsoft may run the model in other regions. People sign in with your organisation’s own Entra ID accounts, and access is by role: Admin, Analyst, Viewer, Comms or End User.

What reaches Glaicier

  • API calls from the app, which pass through our gateway for sign-in and routing. It doesn’t store their content. It logs the caller’s IP address, their user object ID and the URL path.
  • Operational logs (timings, errors and internal IDs), kept for 30 days in the UK.
  • Daily usage counts.
  • Your licence and entitlements.

Glaicier

  • Gateway for sign-in and routing
  • Licences and entitlements
  • Operational logs, 30 days, UK
  • Daily usage counts

Your Azure subscription

  • Function Apps
  • Azure SQL, Entra-only
  • Azure OpenAI and AI Search
  • Key Vault
  • Private endpoints

Your tenant data, plans and decisions are stored here

See it on a sample tenant.

A 30-minute walkthrough with the engineers who build it, including what it would cost for your tenant. Novalysis is bought through the Azure Marketplace, and public sector organisations that need to buy through a framework can do so through a provider we work with.