Once the cloud migration environment is configured, all users without SUPER permissions will be automatically assigned to the Intelligent Cloud user group with the Intelligent Cloud permission set and will have read-only access.
Users that are reassigned to the Intelligent Cloud user group will have access to read ALL data by default. If you need to further restrict what data a user should read, the SUPER user may create new user groups and permissions sets and assign users accordingly.1
Only users with SUPER permissions will be allowed to make modifications to the system at this point.
WHY?
If you need to keep the business running while testing, the on-premises solution is your primary application for running your business, including activities such as data entry, tax reporting, and sending invoices. You can run the migration more than once, and the migration process will only migrate tables that have changed. Note that the data on LS Central SaaS will be overwritten. Therefore it is important not to do any activities or modifications of data until the migration process is finished and you are ready to go live on LS Central SaaS.
If you need to do some tests on the SaaS environment, you can create a sandbox environment by copying the production environment.