Manage migration projects at scale with Azure Lighthouse and Azure Migrate

Published Dec 17 2020 11:22 AM 2,797 Views
Microsoft

Since its launch in 2019, Azure Lighthouse has become a best practice for cross- and multi-tenant management, allowing for higher automation, scalability, and enhanced governance across resources and tenants. The cross-tenant management experience offers the flexibility of managing multiple customers from within the service provider tenant, having a single pane of glass for enhanced scenarios and services available in the cloud. Azure Lighthouse is integrated with various services such as Azure Monitor, Azure Sentinel, and Azure Arc, to name a few. We are happy to announce the Azure Lighthouse integration with Azure Migrate for partners to manage migration projects at scale across multiple tenants.

 

Partners and customers engage in migration projects in diverse ways. Many use Azure Migrate tooling to discover, assess, and migrate on-premises environment to Azure. Usually, partners who perform migrations must access each customer subscription individually by using the CSP (Cloud Solution Provider) subscription model or by creating a guest user on customer tenant . Performing these tasks for multiple customers can be more efficient through the use of Azure Lighthouse, rather than accessing each customer subscription one at a time. Additionally, reducing risk and security exposure is crucial when providing services to customers. By using Azure Lighthouse you can follow the least privilege access model as per the zero-trust security principles. 

 

Azure Lighthouse streamlines these migration engagements by leveraging Azure resource delegation to provide a single view from the managed tenant to access all relevant Azure Migrate projects across multiple customer tenants and subscriptions. Azure Lighthouse integration with Azure Migrate simplifies the migration process, enabling service providers to discover, assess, and migrate workloads for different customers at scale while customers still have full visibility and control of their environments.

 

We have observed two commonly used scenarios from service providers who perform migrations via Azure Lighthouse:

Option 1: Create Azure Migrate project in the customer tenant

  • In this scenario, no resources will be created or stored in the managing tenant.
  • Discovery, assessment, and migration can be initiated from the managing tenant and set the customer tenant/subscription as target for the migrated resources.
  • This approach minimizes context switching for service providers working across multiple customers, while letting customers keep all their resources in their own tenants.

Option 2: Create Azure Migrate project in the managing tenant

  • In this scenario, Azure Migrate project and related resources for the project, including discovery and assessment data, will reside in the managing tenant. The assessments can be exported and shared with customers.
  • Required actions will be initiated from the managing tenant while setting customer tenant/subscription as the target for migration resources.
  • This approach enables services providers to start migration discovery and assessment projects quickly, abstracting away those initial steps from customer subscriptions and tenants.

You may choose to create the Azure Migrate project in the customer tenant or in your managing tenant depending on your customer contracts and what best fits their migration needs. For more information, please review our guide, How to: Manage migration projects at scale.  Get started by creating an Azure Lighthouse Migration offer – a sample offer template is available for use in the Azure Lighthouse GitHub repo.

 

Finally, ensure you get partner recognition for the migrations performed on behalf of customer via Azure Lighthouse. As a member of the Microsoft Partner Network, you can link your partner ID with the credentials used to manage delegated customer resources. Partner Admin Link (PAL) enables Microsoft to recognize partners who drive Azure customer success based on the tasks performed for customers, including migration projects. For more information, see Link your partner ID to track your impact on delegated resources.

 

We are always awaiting your feedback to provide new and enhanced capabilities that will help you achieve more with Azure. Try managing your migrations projects at-scale with Azure Lighthouse and let us know what you think and would like to see in the future.

 

%3CLINGO-SUB%20id%3D%22lingo-sub-1999161%22%20slang%3D%22en-US%22%3EManage%20migration%20projects%20at%20scale%20with%20Azure%20Lighthouse%20and%20Azure%20Migrate%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1999161%22%20slang%3D%22en-US%22%3E%3CP%3ESince%20its%20launch%20in%202019%2C%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Flighthouse%2Foverview%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Lighthouse%3C%2FA%3E%20has%20become%20a%20best%20practice%20for%20cross-%20and%20multi-tenant%20management%2C%20allowing%20for%20higher%20automation%2C%20scalability%2C%20and%20enhanced%20governance%20across%20resources%20and%20tenants.%20The%20cross-tenant%20management%20experience%20offers%20the%20flexibility%20of%20managing%20multiple%20customers%20from%20within%20the%20service%20provider%20tenant%2C%20having%20a%20single%20pane%20of%20glass%20for%20enhanced%20scenarios%20and%20services%20available%20in%20the%20cloud.%20Azure%20Lighthouse%20is%20integrated%20with%20various%20services%20such%20as%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Flighthouse%2Fhow-to%2Fmonitor-at-scale%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Monitor%3C%2FA%3E%2C%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Flighthouse%2Fhow-to%2Fmanage-sentinel-workspaces%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Sentinel%3C%2FA%3E%2C%20and%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Flighthouse%2Fhow-to%2Fmanage-hybrid-infrastructure-arc%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Arc%3C%2FA%3E%2C%20to%20name%20a%20few.%20We%20are%20happy%20to%20announce%20the%20Azure%20Lighthouse%20integration%20with%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Flighthouse%2Fhow-to%2Fmigration-at-scale%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Migrate%3C%2FA%3E%20for%20partners%20to%20manage%20migration%20projects%20at%20scale%20across%20multiple%20tenants.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EPartners%20and%20customers%20engage%20in%20migration%20projects%20in%20diverse%20ways.%20Many%20use%20Azure%20Migrate%20tooling%20to%20discover%2C%20assess%2C%20and%20migrate%20on-premises%20environment%20to%20Azure.%20Usually%2C%20partners%20who%20perform%20migrations%20must%20access%20each%20customer%20subscription%20individually%20by%20using%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpartner-center%2Fcustomers-revoke-admin-privileges%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ECSP%20(Cloud%20Solution%20Provider)%20subscription%20model%3C%2FA%3E%20or%20by%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fexternal-identities%2Fwhat-is-b2b%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ecreating%20a%20guest%20user%20on%20customer%20tenant%3C%2FA%3E%26nbsp%3B.%20Performing%20these%20tasks%20for%20multiple%20customers%20can%20be%20more%20efficient%20through%20the%20use%20of%20Azure%20Lighthouse%2C%20rather%20than%20accessing%20each%20customer%20subscription%20one%20at%20a%20time.%20Additionally%2C%20reducing%20risk%20and%20security%20exposure%20is%20crucial%20when%20providing%20services%20to%20customers.%20By%20using%20Azure%20Lighthouse%20you%20can%20follow%20the%20least%20privilege%20access%20model%20as%20per%20the%20zero-trust%20security%20principles.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAzure%20Lighthouse%20streamlines%20these%20migration%20engagements%20by%20leveraging%20Azure%20resource%20delegation%20to%20provide%20a%20single%20view%20from%20the%20managed%20tenant%20to%20access%20all%20relevant%20Azure%20Migrate%20projects%20across%20multiple%20customer%20tenants%20and%20subscriptions.%20Azure%20Lighthouse%20integration%20with%20Azure%20Migrate%20simplifies%20the%20migration%20process%2C%20enabling%20service%20providers%20to%20discover%2C%20assess%2C%20and%20migrate%20workloads%20for%20different%20customers%20at%20scale%20while%20customers%20still%20have%20full%20visibility%20and%20control%20of%20their%20environments.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20have%20observed%20two%20commonly%20used%20scenarios%20from%20service%20providers%20who%20perform%20migrations%20via%20Azure%20Lighthouse%3A%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EOption%201%3A%20Create%20Azure%20Migrate%20project%20in%20the%20%3CEM%3Ecustomer%20%3C%2FEM%3Etenant%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EIn%20this%20scenario%2C%20no%20resources%20will%20be%20created%20or%20stored%20in%20the%20managing%20tenant.%3C%2FLI%3E%0A%3CLI%3EDiscovery%2C%20assessment%2C%20and%20migration%20can%20be%20initiated%20from%20the%20managing%20tenant%20and%20set%20the%20customer%20tenant%2Fsubscription%20as%20target%20for%20the%20migrated%20resources.%3C%2FLI%3E%0A%3CLI%3EThis%20approach%20minimizes%20context%20switching%20for%20service%20providers%20working%20across%20multiple%20customers%2C%20while%20letting%20customers%20keep%20all%20their%20resources%20in%20their%20own%20tenants.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSTRONG%3EOption%202%3A%20Create%20Azure%20Migrate%20project%20in%20the%20%3CEM%3Emanaging%20%3C%2FEM%3Etenant%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EIn%20this%20scenario%2C%20Azure%20Migrate%20project%20and%20related%20resources%20for%20the%20project%2C%20including%20discovery%20and%20assessment%20data%2C%20will%20reside%20in%20the%20managing%20tenant.%20The%20assessments%20can%20be%20exported%20and%20shared%20with%20customers.%3C%2FLI%3E%0A%3CLI%3ERequired%20actions%20will%20be%20initiated%20from%20the%20managing%20tenant%20while%20setting%20customer%20tenant%2Fsubscription%20as%20the%20target%20for%20migration%20resources.%3C%2FLI%3E%0A%3CLI%3EThis%20approach%20enables%20services%20providers%20to%20start%20migration%20discovery%20and%20assessment%20projects%20quickly%2C%20abstracting%20away%20those%20initial%20steps%20from%20customer%20subscriptions%20and%20tenants.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EYou%20may%20choose%20to%20create%20the%20Azure%20Migrate%20project%20in%20the%20customer%20tenant%20or%20in%20your%20managing%20tenant%20depending%20on%20your%20customer%20contracts%20and%20what%20best%20fits%20their%20migration%20needs.%20For%20more%20information%2C%20please%20review%20our%20guide%2C%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Flighthouse%2Fhow-to%2Fmigration-at-scale%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EHow%20to%3A%20Manage%20migration%20projects%20at%20scale%3C%2FA%3E.%20%26nbsp%3BGet%20started%20by%20creating%20an%20Azure%20Lighthouse%20Migration%20offer%20%E2%80%93%20a%20%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FAzure%2FAzure-Lighthouse-samples%2Ftree%2Fmaster%2Ftemplates%2Fdelegated-resource-management-azmigrate%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Esample%20offer%20template%3C%2FA%3E%20is%20available%20for%20use%20in%20the%20Azure%20Lighthouse%20GitHub%20repo.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFinally%2C%20ensure%20you%20get%20partner%20recognition%20for%20the%20migrations%20performed%20on%20behalf%20of%20customer%20via%20Azure%20Lighthouse.%20As%20a%20member%20of%20the%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fpartner.microsoft.com%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMicrosoft%20Partner%20Network%3C%2FA%3E%2C%20you%20can%20link%20your%20partner%20ID%20with%20the%20credentials%20used%20to%20manage%20delegated%20customer%20resources.%20Partner%20Admin%20Link%20(PAL)%20enables%20Microsoft%20to%20recognize%20partners%20who%20drive%20Azure%20customer%20success%20based%20on%20the%20tasks%20performed%20for%20customers%2C%20including%20migration%20projects.%20For%20more%20information%2C%20see%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Flighthouse%2Fhow-to%2Fpartner-earned-credit%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ELink%20your%20partner%20ID%20to%20track%20your%20impact%20on%20delegated%20resources%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20are%20always%20awaiting%20your%20feedback%20to%20provide%20new%20and%20enhanced%20capabilities%20that%20will%20help%20you%20achieve%20more%20with%20Azure.%20Try%20managing%20your%20migrations%20projects%20at-scale%20with%20Azure%20Lighthouse%20and%20%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F922753%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Elet%20us%20know%3C%2FA%3E%20what%20you%20think%20and%20would%20like%20to%20see%20in%20the%20future.%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1178852128%22%20id%3D%22toc-hId--1178852128%22%20id%3D%22toc-hId--1178852220%22%3E%26nbsp%3B%3C%2FH2%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1999161%22%20slang%3D%22en-US%22%3E%3CP%20data-unlink%3D%22true%22%3EWe%20are%20happy%20to%20announce%20the%20Azure%20Lighthouse%20integration%20with%20Azure%20Migrate%20for%20partners%20to%20manage%20migration%20projects%20at%20scale%20across%20multiple%20tenants.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2242290%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20migration%20projects%20at%20scale%20with%20Azure%20Lighthouse%20and%20Azure%20Migrate%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2242290%22%20slang%3D%22en-US%22%3E%3CDIV%3E%3CSPAN%3EClearly%20written%20and%20really%20useful.%20I%20really%20got%20more%20information%20regarding%26nbsp%3B%3CA%20title%3D%22azure%20cloud%20migration%20services%22%20href%3D%22https%3A%2F%2Fcognilytic.com%2Fsolutions%2Fazure-cloud-migration-services%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Eazure%20cloud%20migration%20services%3C%2FA%3E.%20Looking%20forward%20to%20more%20informative%20blogs%20like%20this.%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E
Version history
Last update:
‎Dec 17 2020 02:31 PM
Updated by: