How to reach admin center from tenant Y when not admin in tenant X?

%3CLINGO-SUB%20id%3D%22lingo-sub-2864270%22%20slang%3D%22en-US%22%3EHow%20to%20reach%20admin%20center%20from%20tenant%20Y%20when%20not%20admin%20in%20tenant%20X%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2864270%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3EI%20am%20a%20regular%20member%20in%20my%20own%20organization's%20tenant%20(Company%20X)%20and%20I%20have%20been%20given%20access%20to%20another%20company's%20MS365%20tenant%20(Company%20Y)%20with%20global%20reader%20role%20to%20conduct%20a%20review.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20no%20problem%20accessing%20the%20AAD%20blade%20in%20the%20portal%20for%20both%20Company%20X%20(can't%20see%20much%2C%20which%20is%20normal)%20and%20Company%20Y%20(can%20see%20everything%2C%20which%20is%20normal)%20and%20there%20is%20the%20directory%20switching%20feature%20available%20in%20the%20top%20right%20corner.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20when%20entering%20the%20admin.microsoft.com%20page%2C%20I%20am%20shown%20the%20%22sign%20out%20or%20switch%20to%20an%20account%20that%20has%20permission%22%20message.%20It%20seems%20that%20this%20page%20only%20identifies%20my%20Company%20X%20membership%2C%20not%20my%20Company%20Y%20membership.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20read%20about%20the%22All%20tenants%22%20feature%20to%20help%20switching%20between%20tenants%2C%20but%20it%20is%20located%20inside%20the%20Admin%20Center%2C%20I%20cannot%20even%20reach%20that%20page.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20ideas%20on%20how%20I%20can%20%22tell%22%20the%20admin%20center%20that%20I%20want%20to%20be%20seen%20as%20a%20Company%20Y%20member%20and%20not%20a%20Company%20X%20member%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2864270%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2865205%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20reach%20admin%20center%20from%20tenant%20Y%20when%20not%20admin%20in%20tenant%20X%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2865205%22%20slang%3D%22en-US%22%3EHello%2C%20AFAIK%2C%20it%20is%20not%20possible%20for%20a%20guest%20user%20to%20access%20the%20admin%20portals%20other%20than%20portal.azure.com.%3CBR%20%2F%3EYou%20should%20ask%20for%20a%20internal%20account%20with%20Global%20Reader%20role.%3C%2FLINGO-BODY%3E
Occasional Contributor

Hello,

I am a regular member in my own organization's tenant (Company X) and I have been given access to another company's MS365 tenant (Company Y) with global reader role to conduct a review.

 

I have no problem accessing the AAD blade in the portal for both Company X (can't see much, which is normal) and Company Y (can see everything, which is normal) and there is the directory switching feature available in the top right corner.

 

However, when entering the admin.microsoft.com page, I am shown the "sign out or switch to an account that has permission" message. It seems that this page only identifies my Company X membership, not my Company Y membership.

 

I have read about the"All tenants" feature to help switching between tenants, but it is located inside the Admin Center, I cannot even reach that page.

 

Any ideas on how I can "tell" the admin center that I want to be seen as a Company Y member and not a Company X member?

 

 

4 Replies
Hello, AFAIK, it is not possible for a guest user to access the admin portals other than portal.azure.com.
You should ask for a internal account with Global Reader role.

@starbuck3000 

Use an In Private browser session with Company Y or use a completely different browser to login to Company Y's admin portal.

Hello,
I am not sure the rule you mentioned works entirely: as an external user granted with global reader role, I was still able to enter the SharePoint admin center. I think this is due to the fact that there is a uniquely identifying URL available (tenantname.admin.sharepoint.com) for each tenant.

I think this is not caused by credentials or user type, but with a limitation in the admin centers that are reached through a unified url (e.g., admin.microsoft.com). You get pushed out of the site without ever being given the opportunity to switch tenant.

I was hoping for a way to specify the tenant in the url (e.g., "?tenant=<guid>" or ?tid=<guid>"), like when you log in through PowerShell, but could not find one that works.
Thank you for replying. Unfortunately that would not work: the problem is not caused by conflicting sessions but the admin center does not let you in if you are not given permissions into your own tenant administration console first. This is a different behavior that the Azure console, which lets you in without giving you access to your tenant's resources but you still can reach the "switch directory" button to initiate the switch.