I am using ipa migrate-ds to move entries from an old single master IPA instance to an IDM instance on a new environment with a new realm name. I was able to use the ipa migrate-ds command to get the users and groups moved successfully, but I am missing stuff such as my host groups and hbac and sudo rules. Are there flags to pull those over as well? For host groups I don't need to move over the hosts since I will have to register all of the boxes to the new realm anyhow to ensure they can properly fine both of the masters that I will have in the new environment. If need be I can do these by hand, but copying over these sets as is since I know they work for my environment will be preferable.

If there's a better guide for options and flags for ipa migrate-ds, please point me to it. All my searching brings me to the same pages that have a very limited and specific set of usages for this command, and in the os there isn't a man or help page for migrate-ds that I was able to find.