Atlassian Cloud Migration: The Execution Playbook

The execution playbook that picks up where the planning guide ends: tooling, checklists, timelines, and the traps that stall real migrations. Part two of two.

Stacks of shipping containers loaded on a cargo freighter
Two guides, one migration. This is the execution playbook — tooling, checklists, and the cutover itself. Still deciding whether and when to move? Start with the planning guide.

Atlassian ended support for Server on February 15, 2024. Since then, every self-hosted team has been living with one of two plans: stay on Data Center deliberately, or move to Atlassian Cloud eventually. This guide is for the second group — the complete, execution-level companion to our shorter Cloud migration planning guide. That one covers what to decide. This one covers what to do.

Everything here is drawn from Atlassian’s official migration documentation — primarily the Jira pre-migration checklist and the migration resource library — plus the field notes you only collect by running these projects. Where Atlassian has a doc worth reading in full, we link it. Where the docs are quiet, we say so.

The shape of a migration

Our planning guide breaks a migration into four phases: assess, remediate, migrate, stabilize. Nothing below changes that model — it fills it in. Assessment and remediation are where the calendar goes. The migrate phase should be a well-rehearsed weekend. Stabilization is where you find out how honest your testing was.

One vocabulary note before we start: in Cloud, Jira issues are now called work items. Atlassian’s docs use both terms. So will your users, for about a year.

The tooling: Cloud Migration Assistants

Atlassian’s free migration assistants do the heavy lifting. The Jira Cloud Migration Assistant and the Confluence Cloud Migration Assistant install on your Data Center instance, assess your users and apps, run pre-migration checks, and move projects, spaces, users, groups, and attachments to your cloud site. Bitbucket has its own assistant.

Two constraints to know up front. First, the assistants only run on supported Data Center versions — if your instance is old enough, a platform upgrade is step zero. Second, the assistant reviews your data for common errors, but it does not check for everything. That is exactly why Atlassian publishes a manual pre-migration checklist alongside it, and why most of this guide exists.

A timing tip that saves entire weekends: users, groups, and attachments can be migrated in advance of your production window. Attachments are usually the bulk of the transfer. Move them early and your cutover shrinks from a data problem to a verification problem.

For eligible migrations, Atlassian also runs FastShift, a program that accelerates cloud adoption with dedicated support from Atlassian’s own migration team. Worth asking about early.

Users and identity: where migrations are won or lost

Ask anyone who has run a few of these: the data moves fine. The users are the hard part. Atlassian devotes an entire documentation section to user migration, and it earns the attention. Work through these before anything else:

  • Sync your external directories. If Active Directory or LDAP feeds your instance, confirm every directory you need is active and freshly synced before migrating, so data stays linked to the right people. Choose a user migration strategy deliberately rather than by default.
  • Fix invalid and duplicate emails. Jira Cloud does not accept them, and they block the migration. The assistant’s user assessment finds them and can fix many automatically — merging duplicates or deactivating stale accounts — but review its plan before you accept it.
  • Check group names for collisions. Groups in Cloud that share a name with groups in Data Center get merged. Sometimes that is what you want. When it is not, it is a permission escalation waiting for launch day.
  • Clean out Marketplace app users. Accounts with connect.atlassian.com email addresses linger in some Data Center directories and cause trouble mid-migration. Delete or re-address them first.
  • Verify domains and claim accounts. Claim your domains in your Atlassian organization so migrated users become managed accounts.

Identity tooling has its own sequencing. If you need single sign-on or SCIM provisioning, that runs through Atlassian Guard — and Guard Standard should be configured before you migrate, not after. Two traps from the checklist worth repeating: if your identity provider carries two addresses per user (a UPN plus an email) on approved domains, set it to identify users by email, or the same person can arrive in Cloud twice. And if you run Guard Premium, its content scanning inspects each work item as it lands — on a large migration that can generate an avalanche of sensitive-data alerts, so consider temporarily switching off detections you do not need during the run.

Finally, sequence matters: migrate users and groups before everything else, then review which groups picked up product access on the way in.

Apps: still the biggest variable

We said it in the planning guide and it stays true here: Marketplace apps are where migration timelines go to stretch. Start the app audit in week one. The assistants include an app assessment that shows which of your installed apps exist in Cloud, but existence is not parity — and the app existing says nothing about the app’s data.

App data moves only when the vendor has built a migration path, and those paths range from automated to reconfigure-by-hand. Contact each Marketplace Partner whose data you need. For the heavyweights, Atlassian maintains app-specific guidance — ScriptRunner, Xray, and Zephyr Squad each get their own pages, which tells you something about how often they complicate migrations. Some vendors also support preloading app data ahead of the main event.

The honest move is to treat the audit as a subtraction exercise. Every app carries a Cloud license priced at your full user tier. If nobody can name who depends on it, this is the moment it leaves the stack. Our governance guide covers the cleanup discipline in detail, and it applies double before a migration — Cloud does not fix a badly governed instance, it relocates it.

The pre-flight checks Atlassian will hold you to

The Jira pre-migration checklist runs twenty-four items, and Confluence has its own. These are the ones that stop real migrations.

Infrastructure on the Data Center side

  • Heap. Give Jira at least 4 GB of heap allocation, or a large migration can hit an out-of-memory error and crash mid-run.
  • Database connections. Jira’s default connection pool is 20. The migration assistant competes with normal usage for those connections; Atlassian recommends increasing in steps of 10, with 40 usually sufficient.
  • Open files and disk. Target an open-files limit near 32,768, and leave free disk space for the temporary files the migration writes to the Jira home export directory.
  • Background jobs. Pause non-crucial scheduled jobs during migration windows — their cumulative load degrades both the pre-migration checks and the migration itself.
  • Network. The assistant talks to Atlassian’s cloud domains; if a firewall or proxy blocks them, the migration fails. Allow Atlassian’s IP ranges and domains ahead of time, and run a bandwidth test right before the production window — egress traffic scanners can quietly throttle the upload.

Limits on the Cloud side

  • Character limits. Jira Cloud caps work item descriptions and comments at 32,767 characters. Anything longer has to be trimmed before it can move.
  • Assets limits. Migrating Jira Service Management with Assets? Cloud enforces hard numbers: 50,000 objects on Premium and 500,000 on Enterprise (extendable up to 10 million), 100 object schemas, 20 objects linked to a work item through custom fields, 120 attributes per object type, and 2 unique attributes per object type. Audit your CMDB against those limits early — our Assets guide is the companion for that work.
  • Storage. Cloud plans carry different storage limits. Measure what you actually use before you commit to an edition.

Configuration hygiene

  • Duplicate configuration names. Workflows or permission schemes named the same in Data Center and Cloud may be renamed during migration to resolve the conflict. Rename them yourself first, on your terms.
  • Scripted field descriptions. Cloud does not allow HTML or JavaScript embedded in custom field descriptions — it is a cross-site scripting vector. Find and strip them before migrating.
  • Public access. Projects, filters, boards, and dashboards shared with anyone on the internet get switched to logged-in users during migration. Review what is intentionally public, and re-open it in Cloud afterward, deliberately.
  • Data integrity. Run Jira’s Database Integrity Checker, make sure required fields actually hold values, and reactivate any user directories you intend to bring along.
  • Advanced Roadmaps. Shared teams convert to Atlassian Teams, and teams with zero members get assigned a default member — typically an org admin. Review team membership before migration rather than explaining it after.

The person pressing the button

The account running the migration needs system admin on Data Center, an account on the target cloud site, the org admin role in Cloud, write access to the Jira home export directory, and Browse Projects permission on every project selected. Miss one and the pre-flight checks will let you know, usually at the least convenient moment.

Two smaller checklist items earn a mention here. Your cloud site should run the same products and the same language as your Data Center instance, or users, groups, and some fields will not land cleanly. And if you use Jira Align, loop in its support team early — it has extra steps before, during, and after the migration.

Test until it is boring

Atlassian strongly recommends a test migration before the production run. Our position from the planning guide stands: one migration is a gamble, three is a plan. A proper test cycle looks like this:

  1. Back up both sides — Data Center, and your cloud site if it already holds data.
  2. Run a full test migration into a test or sandbox cloud site.
  3. Validate the things that migrate with caveats: boards, filters, dashboards, and automation rules each have their own migration behaviors, and automations in particular need review and re-enabling.
  4. Run structured user acceptance testing with a pilot group from each major team, against scripted real workflows — not vibes.
  5. Time the run. Your production window estimate should come from a stopwatch, not optimism.

One staging trap from the checklist that catches even careful teams: if you clone production data into a staging environment for test runs, save the staging instance’s Server ID first and restore it after the clone. Otherwise staging starts impersonating production in ways that get confusing fast.

And if your production migration will run over a weekend or holiday, or involves more than 1,000 users, tell Atlassian’s migration support team one to two months in advance so they can have extra support on hand. It is the cheapest insurance in this entire project.

Migration week

By now the production run should be a rehearsal of something you have already done three times. The playbook:

  • Freeze the source. Announce a change freeze on the Data Center side for the window. Data created after the migration starts does not come along.
  • Communicate twice as much as feels necessary. What is moving, when the old instance goes read-only, where the new URLs live, and who to ping when something looks off.
  • Run, monitor, verify. The assistant reports progress and errors as it goes. When it finishes, verify counts — projects, work items, attachments, users — against the source before you announce success.
  • Keep Data Center read-only. Do not turn it off. A read-only source instance is your reference copy while stabilization shakes out, and your rollback story if something is genuinely wrong.

If the window is tight, Atlassian’s downtime-reduction guidance is worth a read — most of it amounts to moving attachments and users early and staging the work in waves.

After the move

The migration is done when your users say it is, not when the progress bar does. The post-migration tasks that matter most:

  • Fix cross-product links. Links between Jira and Confluence still point at old URLs after migration. Atlassian ships link-fixing tooling for exactly this.
  • Repair integrations built on IDs. Entity IDs — project, work item, comment — change in Cloud. Anything external that stored those IDs breaks quietly. Atlassian’s Cloud Transition Tools map old IDs to new ones; wire them into your fixes during the testing phase, not after go-live.
  • Review access, then invite. Check which migrated groups received product access, reassign admins where blocklisted admin groups forced substitutions, and only then invite your users in.
  • Enable your admins. Administering Cloud genuinely differs from Data Center — Atlassian documents the differences for Jira and Confluence. Budget real time for it, including for your most experienced admins. Especially for them.

Timelines, licensing, and the honest caveats

The ranges from our planning guide hold: four to six weeks for a small, lightly customized instance; three to six months for mid-market with real workflow and Confluence estates; nine to twelve months for enterprises consolidating instances under compliance constraints. The variable that moves those numbers most is still decision-making speed, not data volume.

On licensing: you will run Data Center and Cloud in parallel during the transition, and Atlassian offers cloud migration trials to Data Center customers to take the sting out of the overlap. Confirm you have enough cloud licenses for everyone you intend to migrate before migration day, and pressure-test the edition choice against what you actually use — our licensing guide and licensing practice exist because that decision is worth real money.

And the caveat a trusted advisor owes you: not every team should migrate this quarter. Regulatory constraints, an app estate with no Cloud path, or a contract cycle that punishes mid-term changes are all legitimate reasons to keep running Data Center well a while longer. The right answer is the one you can still defend in twelve months.

The short version

Sync and assess users. Audit apps in week one. Work the checklist — heap, database pool, firewall rules, character limits, Assets counts, duplicate names, public access. Test until the timing is predictable. Move attachments early, freeze, run, verify. Fix links and integrations, enable admins, keep the old instance read-only. Nothing on that list is exotic. All of it is work.

If you want senior hands on it

Plenty of teams run this playbook themselves with Atlassian’s tooling and the checklists above. Bring in help when the shape changes: multiple instances to consolidate, a heavy app estate, a hard compliance window, or simply nobody internal with the calendar to own it.

Avaratak is an accredited Atlassian Solution Partner, and our cloud migration practice is staffed exclusively by senior consultants — five-plus years on the platform, every one of them. We run test migrations until they are boring, because boring is the goal. If a second set of eyes on your plan would help, book a discovery call — thirty minutes, no theater, and you keep the plan either way.

Atlassian’s own references

Bookmark these. They are the source of truth this guide is built on:

Stuck on the hard part?

Talk it through with a senior consultant.

Guides only take you so far. Bring the messy specifics and we will tell you what we would actually do.

Copyright © 2026 Avaratak Consulting LLC - All Rights Reserved.