How to move an Azure Subscription to a different Tenant

In this post I will explain how to move an Azure Subscription to a different Azure Tenant (Directory). I often use this to move my MPN subscription to a Greenfield tenant to test new functionalities without worrying about settings I’ve made in the past. But this can also be use to bundle multiple Visual Studio subscriptions in one tenant or for any other reason.

 

Demosetup

 

I will be using two Tenants:

– My old tenant called “Demotenant” this is a directory with a MPN subscription attached.

– The other tenant I’m using is “Vmlabblog.com” with a Pay-As-You-Go subscription attached.

In this Tutorial I’m going to move my MPN subscription from Demotenant to Vmlabblog.com.

 

Guest user

 

1. The first step is to create an user which has access to both tenants. The user needs to have a working email-account. I will be using the globaladmin of the “Vmlabblog.com” tenant for this purpose. Login to Tenant the old tenant (demotenant) with an admin account and go to “Azure Active Directory -> Users” and press “New guest user”.

2. Enter the email-address of the guest user (user of the new tenant) and press “Invite”. The guest user you’ve just entered will be added to the Azure AD and send an invitation mail on the email-address entered.

 

3. Now we need to assign owner rights for the subscription to guest we’ve just added. This is necessary to be able to see and move the subscription to another tenant.  Go to subscriptions -> Access control (IAM) and press “Add” in Add a role assignment.

 

4. Select the role “Owner” and select the guest user. Select “Save” to apply the changes.

 

5. Wait till the changes have been applied and signout.

Move subscription

 

6. Check the mailbox of the user you added as a guest user for an invitation email. Open the email and press “Get Started”

 

7. Sign in with the credentials of the Guest User to the new tenant (demotenant). These are the same credentials as used to login into the old tenant. (vmlabblog.com)

 

8. To sign in to the tenant with your guest account you need to agree with the permissions press “Accept” to continue.

 

9. In the Azure portal check if you are in the correct tenant. If not select “Switch directory”

 

10. Select the “all directories” tab, here you should see both the old tenant (demotenant) and the new tenant (VMLabblog.com). Select the old tenant (demotenant).

 

 

11. Go to subscriptions and select the subscription you want to move.

 

12. Select the subscription and press “Change directory” and select the new Tenant. Press “Change” to apply the changes.

 

13. The change will take some time.

 

14. When you now refresh the page (this may take some time) the subscription is gone in the old Tenant (demotenant)

 

15. Switch to the new Directory. You will notice only one subscription is displayed, this is because of the “Global subscriptions filter. Click “global subscriptions filter”.

 

16. Select in the Default subscription filter “select all”

 

17. Now both subscriptions are displayed in the “Subscriptions” view.

 

18. The subscription has now been moved from the old tenant (demotenant) to the new tenant (VMLabBlog.com).

 

8 thoughts on “How to move an Azure Subscription to a different Tenant

  1. valireality

    Nice tutorial, thanks for that. What about resources like resource groups, VM’s, vNet, public IP, etc.?

    Reply
    1. Aad Lutgert Post author

      This response is updated on 10-08-2020

      Hi,

      These resources will be available in the new tenant. It may take some time before the change are applied. Also check the subscription filter you may need to check the box to display the resources which are attached to the moved subscription.

      Reply
  2. Greg

    Thanks for this, further to the previous comment, if you move the Subscription, where do all the resource groups and associated resources that were in it end up if the subscription that they were in got moved?

    Thanks in advance

    Reply
    1. Aad Lutgert Post author

      Hi Greg,

      Thanks for your reply, I just had another look at the question and misread the question. The resource groups and associated resources are attached to the moved subscription and will be available in the new tenant.

      Reply
    1. Aad Lutgert Post author

      Hi Raul,

      Good question, the payment method and invoice recipients will not change when you change the directory of a subscription. Also the account admin will stay the same, so you will need to add the account admin to the new tenant as guest. Another option is to transfer the billing ownership.

      best regards,
      Aad

      Reply
  3. Manuel

    Hi Aad,

    Thanks for this tutorial!

    What will happen with roles, permissions, Service Principles etc. I set up in the old tenant (so with the whole access control)? Do I need to create them again?

    Thanks!
    Manuel

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *