Microsoft Azure – Moving Subscriptions between Tenants

Reading Time: 4 minutes

With the Visual Studio Enterprise subscription, you will receive 130€ of Azure Credits to get your Azure lab infrastructure running. Due to my employer, I am having access to such a subscription, but I had troubles to get started building the infrastructure.

Why?

The MSDN offering got assigned to my working email “employee@company.com” in the employer Azure Tenant. In this context I had no access to the Microsoft Azure Active Directory due security restrictions. This means I could not invite an external user to share the subscription with my Lab Tenant.

In this post I want to show you two different approaches to move subscriptions between tenants depending on your use-case.

Method 1 – This can be used if you have rights in the Source Tenant with the subscription

In the Source Tenant (company.com) head to “Azure Active Directory” > Click on “Invite external user”


Select “Invite user” and specify the email address of the user in the destination tenant.

Choose the subscription which needs to be migrated and click on “Access control (IAM). Click on “Add” and choose “Add Role assignment”

Choose “Owner”

“Select members” and add the created guest account “avdlab1022@outlook.com”

We should see now the guest account as an owner on the subscription.

Check the mailbox of the guest account and accept the invitation.

Now we can change the directory of the subscription in the source tenant (company.com)

Select your Destination Directory.

In the Portal Settings under “Directories + subscriptions” we switch to the destination directory.

The RBAC assignments will be removed during a tenant move. We need to add the Owner role for our Global Admin the destination tenant. In this example: avdlab1022@outlook.com

If you are not able to configure the Access control right away give it some minutes. It can take some time until the subscription is moved completely. The subscription move is completed, and you can start creating your resources.

Method 2 – This can be used if you have no rights in the Source Tenant

In the Destination Tenant (avdlab1022.onmicrosoft.com) head to “Azure Active Directory” > Click on “Invite external user”

Select “Invite user” and specify the email address of the subscription owner in the source tenant.

Check the mailbox of the guest account and accept the invitation.

Select the subscription in the source tenant and click on “Change Directory”

Select your Destination Directory.

In the Portal Settings under “Directories + subscriptions” we switch to the destination directory.

We can now see the subscription in the Lab Tenant.

The RBAC assignments will be removed during a tenant move. We need to add the Owner role for our Global Admin the destination tenant. In this example: avdlab1022@outlook.com

If you are not able to configure the Access control right away give it some minutes. It can take some time until the subscription is moved completely. The subscription move is completed, and you can start creating your resources.

Leave a Reply

Your email address will not be published. Required fields are marked *