Forum Discussion
rangawickramasekara
May 05, 2022Copper Contributor
Azure subscription transfer
Hi, I can transfer an existing subscription to a new AAD (Azure Active Directory) tenant. When am going to transfer it all Roll-Based-Access-Control (RBAC) roll assignments will be deleted from t...
- May 10, 2022
You are actually transferring your subscription to a different AAD tenant, not the other way around. Since there can only be one "authoritative" AAD directory per Azure subscription, it is not possible to transfer "role assignments". What you could do instead, is:
- export current role assignments with 'security principals' (users, groups, SPNs, MIs), roles, and scopes
- map those original security principals with their "representatives" in the new tenant
- prepare a script (or a template) that will populate the RBAC with those role assignments as a bulk operation to minimize any disruptions this transfer may cause
There is a comprehensive guide about the transfer with recommended workflow: Transfer an Azure subscription to a different Azure AD directory | Microsoft Docs
EricStarker
May 05, 2022Gold Contributor
Hello! You've posted your question in the Tech Community Discussion space, which is intended for discussion around the Tech Community website itself, not product questions. I'm moving your question to the Azure Active Directory space - please post Azure AD questions here in the future.
rangawickramasekara
May 06, 2022Copper Contributor
Thanks in advanced Eric!