Impersonation configuration question!

Are the impersonation configuration on the service accounts created for the migration intended to be on the target or the source environment?