Views:

Consider the impacts of migrating your local and SAML accounts from other Trend Micro products to Trend Vision One after updating to the Foundation Services release.

The following table outlines considerations you should be aware of before migrating your user accounts from Trend Cloud One - Endpoint & Workload Security, Trend Micro Apex One as a Service, Trend Micro Cloud App Security, and Trend Micro Email Security.
Updated product
Description
General considerations for all products
All user accounts migrated to Trend Vision One are assigned custom user roles with most of the same permissions and asset visibility scope as before migration.
Important
Important
Role-based access control and license-related permissions are not carried over to Trend Vision One to avoid privilege escalation.
For more information, see User Roles (Foundation Services release).
If you need to migrate SAML Accounts and SAML Group Accounts from your other Trend Micro products to Trend Vision One, update to the Foundation Services release and configure the required identity providers in Identity Providers before migrating users.
SAML users with unverified email domains are required to verify their email addresses and update their accounts before signing in to Trend Vision One.
Migrating Trend Cloud One - Endpoint & Workload Security user accounts to Trend Vision One Server & Workload Protection
After updating to Server & Workload Protection, all local account users can sign in to Trend Vision One with the same credentials used to sign in to Trend Cloud One.
Only SAML Account users that were active in the last 30 days in Trend Cloud One are migrated to Trend Vision One as SAML Accounts.
Users with unverified email domains are required to verify their email addresses before signing in to Trend Vision One.
Tip
Tip
To retain the same capabilities as Trend Cloud One SAML Accounts, manually remove migrated SAML Accounts and re-add the users as IdP-Only SAML Group Accounts after updating to Server & Workload Protection.
Migrating Trend Micro Apex One as a Service user accounts to Trend Vision One Endpoint Security
After updating to Endpoint Security, local account users must sign in to the Trend Micro Apex One as a Service console and update their sign-in email address and password before signing in to Trend Vision One.
Note
Note
If the email address associated with a Trend Vision One local account was previously registered with a Trend Cloud One account, the accounts and sign-in credentials merge. The user can sign in to Trend Vision One with the same credentials used to sign in to Trend Cloud One.
For more information, see Update from Apex One as a Service.
Important
Important
SAML Accounts and SAML Group Accounts without valid email addresses cannot be migrated to Trend Vision One.
The membership of Trend Micro Apex One as a Service SAML Group Accounts remains exactly the same after migrating to Trend Vision One, and cannot be updated. If you need to update group membership after migration, you must create new SAML Group Accounts in User Accounts.
For more information, see Update from Apex One as a Service.
Updating Trend Micro Cloud App Security user accounts to Trend Vision One Email and Collaboration Security
After updating to Email and Collaboration Security, all local account users receive an invitation email and must update their account before signing in to Trend Vision One.
Local account users can also sign in to the Trend Micro Cloud App Security console and follow the instructions to update their user account.
Note
Note
If a Trend Vision One local account's sign-in email address was previously registered with a Trend Cloud One account, the two accounts merge. The merged account user can sign in to both Trend Vision One and Trend Cloud One with the sign-in credentials previously used for Trend Cloud One.
For more information, see Update from Cloud App Security.
Updating Trend Micro Email Security user accounts to Trend Vision One Email and Collaboration Security
After updating to Email and Collaboration Security, all local account users must sign in to the Trend Micro Email Security console and follow the instructions to update their sign-in email address and password.
Note
Note
If a Trend Vision One local account's sign-in email address was previously registered with a Trend Cloud One account, the two accounts merge. The merged account user can sign in to both Trend Vision One and Trend Cloud One with the sign-in credentials previously used for Trend Cloud One.
For more information, see Update from Trend Micro Email Security.
After updating to Email and Collaboration Security, any Trend Micro Email Security accounts configured as both local and SAML user accounts are migrated to Trend Vision One as SAML Accounts.
For more information, see Update from Trend Micro Email Security.