How to Use an Azure Subscription with a Separate Microsoft 365 Tenant

 Organizations sometimes purchase an Azure subscription and a Microsoft 365 tenant under two different directories. This results in two separate tenants, and administrators may later want their Microsoft 365 tenant (Entra ID / Azure AD) users to access and manage the Azure subscription.

This guide explains how to connect a standalone Azure subscription with a separate Microsoft 365 tenant, the available methods, and step‑by‑step instructions including PowerShell options.

Understanding the Scenario

You currently have:

  1. Azure Subscription (Tenant‑A)
  2. Microsoft 365 Tenant (Tenant‑B)

Your goal is to allow Microsoft 365 tenant users from Tenant‑B to use or manage the Azure subscription that is currently in Tenant‑A.

There are three ways to achieve this:

  1. Assign access by inviting Microsoft 365 tenant users as guest users
  2. Move the Azure subscription to the Microsoft 365 tenant
  3. Transfer ownership of the subscription

Each method is explained in detail below.

Method 1: Invite M365 Tenant Users to Azure Subscription (Recommended & Safe)

This is the simplest way. Your Azure subscription remains in Tenant‑A, but users from Tenant‑B get access as guest users.

Steps (Azure Portal)

  1. Sign in to the Azure portal.
  2. Go to Subscriptions and select your subscription.
  3. Open Access control (IAM).
  4. Select Add → Add role assignment.
  5. Choose a role such as:
    • Owner
    • Contributor
    • Reader
  6. Under Members, select + Select members.
  7. Click + Invite guest.
  8. Enter the user email from Microsoft 365 tenant (Tenant‑B).
  9. Send the invitation.
  10. Ask the user to accept the invitation.
  11. The user can now log in and access the Azure subscription.

    PowerShell Example


    # Login to Azure
    Connect-AzAccount

    # Invite M365 tenant user to Azure directory
    $guestEmail = "admin@yourM365tenant.onmicrosoft.com"
    New-AzADUser -DisplayName "M365 Admin" `
    -UserPrincipalName $guestEmail `
    -MailNickname "m365admin"

    # Assign Owner role
    New-AzRoleAssignment `
    -SignInName $guestEmail `
    -RoleDefinitionName "Owner" `
    -Scope "/subscriptions/<SubscriptionID>"



    Method 2: Change Directory (Move the Subscription to M365 Tenant)

    If you want your Azure subscription to exist entirely under the M365 tenant directory, you can change its directory.

    Steps

    1. Sign in to Azure portal.
    2. Navigate to Subscriptions.
    3. Select the subscription to move.
    4. Choose Change directory.
    5. Select the Microsoft 365 tenant directory.
    6. Confirm and complete the migration.
    7. Log in under the new tenant and reassign roles.

    Important Notes

    • Service principals, RBAC assignments, and Azure AD groups from the old tenant will no longer work.
    • You may need to recreate identity/configurations.
    • Resources (VMs, Storage, etc.) remain intact; only directory assignment changes.

    Method 3: Transfer Billing Ownership

    If you want the Azure subscription’s billing to be fully under the Microsoft 365 tenant account holder, use subscription transfer.

    Steps

    1. Go to Cost Management + Billing.
    2. Select Subscriptions.
    3. Choose Transfer subscription.
    4. Enter the email address of the M365 tenant account.
    5. Receiver must accept the invitation.
    6. Subscription transfers to the new tenant.

    Which Method Should You Choose?

    RequirementRecommended Method
    Just want M365 users to access AzureInvite as Guest (Method 1)
    Want Azure subscription under M365 tenantChange Directory (Method 2)
    Want billing owner in M365 tenantTransfer Subscription (Method 3)

    For most scenarios, Method 1 is the safest and quickest.

PowerShell: Check Subscription Tenant


Connect-AzAccount
Get-AzSubscription | Select Name, Id, HomeTenantId

More Cloud & M365 Articles

For deep technical articles, walkthroughs, and real‑time updates, visit:
https://cloudreis.blogspot.com

To stay updated on Microsoft 365, Azure, Teams, and cloud technologies, subscribe to the CloudReis M365 Updates Channel (WhatsApp):
whatsapp channel



Post a Comment

0 Comments