When you are migrating application, that is not upgrading es2.5 TO es4. You are doing it manually. The user migration happens as the part of DB migration, as user/ groups & their information resides in LC DB. Having said that, AD users can be synced to new environment, but as such there is no way to do the same for local users. It all depends on the number of local users you have. If the number is large enough and you want to import you can do it from API, but that is just an approach not recommended. ( there are constraints like -there are groups too - import the groups first, then users, then update their group membership etc. 2) when you migrate users you have to give new password - as you cannot retrieve old password , so all users will have a new default password) 3) if above two constraints can be overlooked for testing applications, you can further check the API. export groups list - import groups. export users & get user membership too- import users - update user membership if any ( info like email account etc will still be missed, so it needs to be taken care of) Otherwise if local users number is not large enough & if you have just one environment- manual operation is recommended.