| `--dest-token` | `$DEST_TOKEN` | GitLab destination token with at least scopes `api,read_repository,write_repository` and `Owner` role (**mandatory**) |
| `--dest-sync-path` | `$DEST_SYNC_PATH` | GitLab destination root group path to synchronize (defaults to `--src-sync-path`) |
| `--dest-keep-base-url` | `$DEST_KEEP_BASE_URL` | Keep base URL for destination GitLab (defaults to `false`) |
| `--max-visibility` | `$MAX_VISIBILITY` | maximum visibility of projects in destination group (defaults to `public`) |
| `--skip-visibility` | `$SKIP_VISIBILITY` | skip updating the destination group or project visibility (when it exists already) |
| `--exclude` | `$EXCLUDE` | project/group path(s) to exclude (multiple CLI option; env. variable is a coma separated list; wins over `--include`) |