SOLVED
Home

Connecting Single On-Premise AD to Multiple O365 Tenant

%3CLINGO-SUB%20id%3D%22lingo-sub-719082%22%20slang%3D%22en-US%22%3EConnecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-719082%22%20slang%3D%22en-US%22%3E%3CP%3EPlease%20pardon%20me%20for%20posting%20this%20kind%20of%20question.%20I%20found%20some%20post%20with%20similar%20issues%20but%20my%20problem%20has%20something%20different%20that%20made%20me%20create%20another%20thread.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnyways...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20this%20existing%20client%20that%20has%207%20separate%20O365%20tenants.%20They%20decided%20to%20separate%20the%20tenants%20because%20of%20the%20300%20license%20limitation%20for%20Business%20Premium%20plans.%3C%2FP%3E%3CP%3EThese%20tenants%20have%20different%20domains%20and%20different%20set%20of%20users.%20However%2C%20they%20are%20now%20requesting%20that%20all%20of%20the%20users%20from%20these%207%20tenants%20will%20be%20able%20to%20see%20each%20other%20in%20the%20Global%20Address%20List.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20read%20that%20this%20is%20not%20possible%20but%20I%20really%20need%20to%20know%20what%20are%20my%20options%20in%20this%20scenario.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EClient%20has%20a%20single%20Active%20Directory%20on-premise%20that%20contains%20all%20the%20users%20from%20these%207%20tenants.%20Also%2C%20they%20are%20NOT%20using%20Exchange%20On-premise.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20Advance%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-719082%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ECloud%20Essentials%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-719089%22%20slang%3D%22en-US%22%3ERe%3A%20Connecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-719089%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F304952%22%20target%3D%22_blank%22%3E%40almarlibetario%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20create%20contacts%20to%20in%20each%20tenant%20regarding%20the%20other%20users%20to%20have%20them%20on%20the%20GAL%2C%20you%20cannot%20sync%20the%20same%20object%20to%20different%20tenants.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-719091%22%20slang%3D%22en-US%22%3ERe%3A%20Connecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-719091%22%20slang%3D%22en-US%22%3EAFAIK%2C%20your%20option%20here%20is%20to%20create%20contacts%20from%20other%20tenants%20for%20each%20tenant%20in%20question!%20There%E2%80%99s%20no%20GAL%20sync%20option%20that%20I%E2%80%99m%20aware%20of%20between%20tenants%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-719092%22%20slang%3D%22en-US%22%3ERe%3A%20Connecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-719092%22%20slang%3D%22en-US%22%3ESorry%20didn%E2%80%99t%20see%20you%20there!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-719110%22%20slang%3D%22en-US%22%3ERe%3A%20Connecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-719110%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F50%22%20target%3D%22_blank%22%3E%40Nuno%20Silva%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYes%2C%20this%20is%20the%20first%20thought%20that%20came%20in%20my%20mind%20when%20this%20concern%20came%20in.%20However%2C%20maintaining%20300%20users%20in%207%20tenants%20is%20not%20practical%20to%20do.%20Because%20if%20there%20is%20any%20change%20in%20one%20user%2C%20I%20have%20to%20change%20it%20across%20the%207%20tenants.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-719113%22%20slang%3D%22en-US%22%3ERe%3A%20Connecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-719113%22%20slang%3D%22en-US%22%3ECheck%20out%20different%203%20party%20tools%20for%20this!%3CBR%20%2F%3EI%E2%80%99ll%20msg%20you%20a%20link%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-719129%22%20slang%3D%22en-US%22%3ERe%3A%20Connecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-719129%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F72542%22%20target%3D%22_blank%22%3E%40adam%20deltinger%3C%2FA%3E%26nbsp%3B.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20it%20safe%20to%20say%20that%20Microsoft's%20current%20technology%20does%20not%20support%20this%20kind%20of%20scenario%3F%20Do%20I%20really%20need%20to%20use%20a%203rd%20party%20system%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-719136%22%20slang%3D%22en-US%22%3ERe%3A%20Connecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-719136%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20you%20have%20synchronization%20with%20your%20AD%20with%20all%20of%20your%20tenant's%20with%20different%20AD%20Connect%20servers%20using%20different%20OUs%2C%20you%20can%20create%20a%20script%20to%20do%20that.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-719175%22%20slang%3D%22en-US%22%3ERe%3A%20Connecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-719175%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F50%22%20target%3D%22_blank%22%3E%40Nuno%20Silva%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20for%20your%20reply.%20I%20am%20not%20sure%20if%20this%20is%20possible%20but%20is%20it%20okay%20if%20you%20a%20share%20sample%20script%20for%20my%20reference%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-719347%22%20slang%3D%22en-US%22%3ERe%3A%20Connecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-719347%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3E%3CBR%20%2F%3EI%20do%20not%20have%20a%20sample%20script%2C%20but%20the%20idea%20is%20you%20to%20centrally%20create%20a%20contacts%20in%20a%20OU%20and%20have%20a%20script%20to%20copy%20the%20contacts%20to%20another%20OU%20with%20adding%20something%20like%20company%20name%20to%20the%20end%20to%20be%20different%20in%20your%20active%20directory%2C%20then%20that%20OU%20is%20synced%20to%20their%20respective%20tenant.%20%3CBR%20%2F%3EJust%20an%20idea.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-720916%22%20slang%3D%22en-US%22%3ERe%3A%20Connecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-720916%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F50%22%20target%3D%22_blank%22%3E%40Nuno%20Silva%3C%2FA%3E%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20will%20look%20into%20it%20and%20will%20provide%20the%20update%20how%20am%20I%20going%20to%20address%20the%20concern.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYour%20response%20is%20really%20helpful%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-721895%22%20slang%3D%22en-US%22%3ERe%3A%20Connecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-721895%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F304952%22%20target%3D%22_blank%22%3E%40almarlibetario%3C%2FA%3Eone%20good%20solution%20I%20know%20about%20is%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fcirasync.com%2Fsupport%2Foffice-365%2Fhow-to-sync-exchange-mailbox-contacts%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fcirasync.com%2Fsupport%2Foffice-365%2Fhow-to-sync-exchange-mailbox-contacts%2F%3C%2FA%3E%3C%2FP%3E%3CP%3Ehowever%20am%20thinking%20out%20loud%207*1*250%20(average%20users%20per%20tenant)%20%3D%201750%20%24%2Fmonth%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-933872%22%20slang%3D%22en-US%22%3ERe%3A%20Connecting%20Single%20On-Premise%20AD%20to%20Multiple%20O365%20Tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-933872%22%20slang%3D%22en-US%22%3Etry%20that%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fazuremarketplace.microsoft.com%2Fen-us%2Fmarketplace%2Fapps%2Fpro-vision.dayone%3Ftab%3DOverview%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fazuremarketplace.microsoft.com%2Fen-us%2Fmarketplace%2Fapps%2Fpro-vision.dayone%3Ftab%3DOverview%3C%2FA%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
almarlibetario
Occasional Contributor

Please pardon me for posting this kind of question. I found some post with similar issues but my problem has something different that made me create another thread.

 

Anyways...

 

We have this existing client that has 7 separate O365 tenants. They decided to separate the tenants because of the 300 license limitation for Business Premium plans.

These tenants have different domains and different set of users. However, they are now requesting that all of the users from these 7 tenants will be able to see each other in the Global Address List.

 

I have read that this is not possible but I really need to know what are my options in this scenario.

 

Client has a single Active Directory on-premise that contains all the users from these 7 tenants. Also, they are NOT using Exchange On-premise.

 

Thanks in Advance

11 Replies

Hi @almarlibetario,

 

You can create contacts to in each tenant regarding the other users to have them on the GAL, you cannot sync the same object to different tenants.

AFAIK, your option here is to create contacts from other tenants for each tenant in question! There’s no GAL sync option that I’m aware of between tenants

Adam
Sorry didn’t see you there!

@Nuno Silva 

 

Yes, this is the first thought that came in my mind when this concern came in. However, maintaining 300 users in 7 tenants is not practical to do. Because if there is any change in one user, I have to change it across the 7 tenants.

Check out different 3 party tools for this!
I’ll msg you a link

Thanks @adam deltinger .

 

Is it safe to say that Microsoft's current technology does not support this kind of scenario? Do I really need to use a 3rd party system?

Hi,

If you have synchronization with your AD with all of your tenant's with different AD Connect servers using different OUs, you can create a script to do that.

Hi @Nuno Silva ,

 

Thank you for your reply. I am not sure if this is possible but is it okay if you a share sample script for my reference?

Solution
Hi,

I do not have a sample script, but the idea is you to centrally create a contacts in a OU and have a script to copy the contacts to another OU with adding something like company name to the end to be different in your active directory, then that OU is synced to their respective tenant.
Just an idea.

Thank you @Nuno Silva,

 

I will look into it and will provide the update how am I going to address the concern.

 

Your response is really helpful

 

@almarlibetarioone good solution I know about is https://cirasync.com/support/office-365/how-to-sync-exchange-mailbox-contacts/

however am thinking out loud 7*1*250 (average users per tenant) = 1750 $/month

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
38 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies