I've been tasked to move the entire AD domain over to the new syncing tool from Microsoft. The way it's currently setup we use on-prem AD to create and manage the accounts which gets sync'd to Azure. We don't have anyone using on-prem AD to authenticate against as they always use Azure for that. None of their computers are hybrid joined as it's all Azure joined.

Any gotchas I should be aware of? Seems the Connect Sync is doing a full sync of the AD domain. From what I understand I can add the cloudNoFlow and JoinNoFlow to prevent Connect Sync from exporting objects adds, object deletions, and non-reference attribute updates.

How well does the automatic migration tool work or should I just try doing this manually? I am aware of the 150K objects limit.