Replace users in Azure DevOps Server

I migrated an Azure DevOps Server (née TFS) to a different physical machine, and while most stuff seems to work, one thing that didn't survive is user identities, because the old machine was in a different domain (in the NT sense).

Suppose a project has a team of OLDDOMAIN\Dan and OLDDOMAIN\Sally — is there some script I can use to add NEWDOMAIN\Dan and NEWDOMAIN\Sally to the same team? Failing that, is there a way to list all project teams and/or recursively list all permissions?