I've been trying to find out way, do'-don't's of how the user/group permission can be synced with AEMaaCS? As I've read the official documentation, it shows via User Sync tool or uploading via CSV or connecting via active directory to sync users/groups. But, I didn't get the part how existing permissions of user/group which are there in AMS can be moved to AEMaaCS!
Could you please let me know the best possible way here (with pros and cons if there're any)?
If there is any content or dam assets migration associated with the users and group migration. My suggestion would be using CTT.
The Users and Groups transferred by the Content Transfer Tool are only those that are required by the content to satisfy permissions. TheExtractionprocess copies the entire/homeinto the migration set and theIngestionprocess copies all users and groups referenced in the migrated content ACLs. To automatically map the existing users and groups to their IMS IDs, please refer to User mapping tool