---
title: Prepare your account for migration
slug: prepare-your-account-for-migration
createdAt: 2026-09-02T11:14:11.467Z
---

## Overview

Before migrating to Bridge Automation Service (BAS), complete the required setup and access configuration tasks described in this section.

## Prerequisites 

Before using BAS, confirm the following:

- The account is onboarded to the appropriate Kyndryl Bridge and BAS is enabled. For more information, see [Onboarding and enabling Bridge Automation](https://docs.kyndryl.com/onboarding-and-enabling-bridge-automation).
- A user with the **Bridge Platform Administrator** role completes the prerequisite configuration tasks:
  - Verify that the required automation access groups are available in Bridge IAM. The access groups typically begin with **automation**. Common access groups include:
    -  **automation\_admin** or **automation\_administrator**
    - **automation\_editor**
    - **automation\_operator**
    - **automation\_viewer**

# Create dedicated Client Automated Configuration Framework credentials

To allow BAS to access the Client Automated Configuration Framework Credentials (CACF), create dedicated credentials for each organization or account.

1. Follow the IAM process to obtain a Functional ID for BAS access to CACF. This task is typically performed by the Delivery Program Executive (DPE).<u>T</u>he Delivery Program Executive (DPE) typically performs this task. For more information, go to [Identity Management at Kyndryl.](https://kyndryl.sharepoint.com/sites/IdentityandAccessManagement/SitePages/Identity%20Management.aspx#how-to-create-a-functional-or-application-id-1)
2. Sign in to Ansible Automation Platform (AAP) using the Functional ID. This step creates the AAP user profile associated with this ID.
3. The Tower Account/Organization Administrator grants the required permissions to the AAP user profile.
4. A Tenant Automation Administrator (TAA) can generate a token in AAP. BAS uses this token as the FID token to connect to AAP for a specific organization.

For assistance with creating a Functional ID or completing CACF-related tasks, contact the CACF team. For more information, go to [Automation Services Onboarding and Enablement](https://kyndryl.sharepoint.com/sites/CTO-Automation/SitePages/Automation-Services-Enablement.aspx?TeamsCID=745d84aa-a321-42a6-8d5d-9ee941928136#aap-communication-with-aiops-automation-services).

# Onboard a dedicated CACF connection as a Bridge credential

From the Kyndryl Bridge main menu :inlineImage[]{src="https://api.archbee.com/api/optimize/QU1TIK52ntw5Jsos0uOt5/NK7Yw9tQgnlqBGwu7eG4H-20260601-205917.svg" alt caption width="23" height="23"}, go to **Administration** →**&#x20;Connections Management.&#x20;**

1. Click **Tool Connections**, and then click **Add Connection**.
2. Configure the connection:
   1. Set Connection type to CACF.
   2. Under Supported apps, select Bridge Automation Service.
   3. Enter a connection name using the following format: \<GSMA\_CODE>@CACF\_INSTANCE **Example:** ace\@devtest4.&#x20;
   4. **Optional:&#x20;**&#x45;nter a description to identify the target environment&#x20;
   5. Clic&#x6B;**&#x20;Next.&#x20;**
   6. Enter the authorization token.&#x20;
   7. Click **Next**.
   8. Review the configuration details and click **Submit**.

# Enable automation admin access group with Admin Role

From the Kyndryl Bridge main menu :inlineImage[]{src="https://api.archbee.com/api/optimize/QU1TIK52ntw5Jsos0uOt5/NK7Yw9tQgnlqBGwu7eG4H-20260601-205917.svg" alt caption width="23" height="23"}, go to **Access Management**→**&#x20;Access Groups.**

1. <u>Log in</u> as a user with the **Bridge Platform Administrator** role.
2. Edit the **automation\_admin** or **automation\_administrator** access group.
3. Assign the **Orchestration Administrator** role.
4. Save the changes.