Unofficial Delinea Secret Server Cross‑Tenant Migration Tool (GUI + Automation) — Sharing with the community

I’m a PAM engineer and recently had to handle a few cross‑tenant migrations in Delinea Secret Server. As many of you know, there’s no built‑in way to migrate secrets, folders, roles, or permissions between tenants (cloud ↔ cloud, on‑prem ↔ on‑prem, hybrid, etc.).

To avoid doing everything manually, I built an unofficial PowerShell‑based tool to automate the process.

Not a vendor, not selling anything — just sharing something I built because it solved a real problem for me.

What it does:

Full Windows GUI

Export → validate → import → reconcile

Folder/role/permission mapping

Integrity checks

Supports cloud, on‑prem, and hybrid

Auto‑update logic for long‑term use

If anyone else here works with Secret Server and has had to deal with tenant splits, mergers, rebuilds, or cloud migrations, this might save you some time.

Github Link:

Affiliation disclosure:

I built this myself for my own work. Not affiliated with Delinea, not a vendor, not selling anything.

Happy to answer questions or hear suggestions from others who’ve had to do Secret Server migrations.