Cognos BI and Planning Upgrade 8.4.1 to 10.1.1

We are planning to update the version of Cognos BI and Planning version 8.4.1 to 10.1.1.

We are having some doubts regarding the Access Rights of the CAC.

How do we maintain that Access Rights after deployment?
Our security framework is made by the CAC Application Folder.

Or would it be better to migrate the PAD?

Thank you,
David