How are Groups within ACLs handled during migration?

You are talking about two different things. First if the ACL or permissions, the second is the effective permissions. NME will translate the permissions. The effective permissions are handled by the group membership in the target platform. NME will migrate the groups and their memberships. So the net results is that the target ACLs will match the source and the target effective permissions will match the source. 

You are talking about two different things. First if the ACL or permissions, the second is the effective permissions. NME will translate the permissions. The effective permissions are handled by the group membership in the target platform. NME will migrate the groups and their memberships. So the net results is that the target ACLs will match the source and the target effective permissions will match the source. 

I don't think that we talk about the same thing.

Usually groups are migrated last in a Domino --> Exchange migration, thus when users are migrated first the groups that are referenced in the Access Control List  (ACL) of the user are not available in the target environment (AD). What happens to users that gained permissions trough a group in this scenario? As groups are not available in the target environment, access cannot be granted to those groups. Thus it would only be possible to grant access to already mail enabled user objects. This would in turn only be possible, of MNE would resolve the groups to individual users.

So in my case (groups get migrated last) the effective permissions for users that received access trough groups would be none?

marvin dickhaus said:

groups get migrated last

What is your reason for this? In the migrations I deal with, groups are usually migrated first - groups in ACLs being one reason, another is that migrated users can immediately use them as distribution lists.

The reason being keeping them up to date during a prolonged migration between Domino and Exchange. I'm working in a coexistence environment.

You can set the MNE Group Provisioning to run at a regular schedule, and to Keep groups in sync (one way), thus keeping groups up to date.