SOLVED

Manage multiple O365 tenants using single AAD

%3CLINGO-SUB%20id%3D%22lingo-sub-1427260%22%20slang%3D%22en-US%22%3EManage%20multiple%20O365%20tenants%20using%20single%20AAD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1427260%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20I%20have%203%20domain%20-%20where%26nbsp%3B%20contoso%20has%20O365%20%2C%20fabricam%20also%20has%20O365%20and%20acmetoons%20has%20G-suite.%20Each%20domain%20has%20100%20users.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20can%20I%20bring%20all%20these%203%20domain%20under%20one%20AAD%20and%20manage%20user%20policies%20using%20single%20admin%20account%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1427260%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1427445%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20multiple%20O365%20tenants%20using%20single%20AAD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1427445%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F683723%22%20target%3D%22_blank%22%3E%40aditya333%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%20you%20will%20need%20to%20decide%20which%20is%20the%20most%20logical%20of%20your%20two%20O365%20tenants%20to%20migrate%20the%20other%20domains%20and%20accounts%20into.%20%26nbsp%3BThen%20I%20recommend%20using%20a%20third%20party%20tool%20such%20as%20BitTitan%20MigrationWiz%20to%20migrate%20the%20contents%20of%20the%20G-Suite%20environment%20and%20the%20other%20O365%20tenant%20into%20your%20chosen%20target%20tenant.%20%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMigrationWiz%20will%20allow%20you%20to%20migrate%20not%20only%20your%20mailboxes%2C%20but%20also%20SharePoint%2FOneDrive%2FTeams%20content%2C%20and%20Google%20Drive%20content%20too.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20completed%20many%20such%20migrations%20in%20this%20manner%20and%20had%20a%20very%20good%20experience.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1428220%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20multiple%20O365%20tenants%20using%20single%20AAD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1428220%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3B%20%26nbsp%3BThank%20you%20for%20your%20reply.%26nbsp%3B%20May%20be%20I%20framed%20my%20question%20wrongly.%20I%20don't%20want%20to%20migrate%20any%20of%20the%203%20domains.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20only%20need%201%20admin%20account%20in%20Azure%20AD%20through%20which%20I%20can%20apply%20policies%20using%20Intune%2C%20enable%20SSO%20which%20should%20get%20applied%20to%20all%203%20domains(%202%20Office365%20domains%26nbsp%3B%26amp%3B%201%20G-Suite%20domain).%20Do%20you%20think%20it%20is%20possible%3F%26nbsp%3B%20Any%20suggestion%20would%20be%20highly%20appreciated.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1428272%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20multiple%20O365%20tenants%20using%20single%20AAD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1428272%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F683723%22%20target%3D%22_blank%22%3E%40aditya333%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOK%2C%20so%20a%20further%20question%20then.%20%26nbsp%3B%20Are%20the%20two%20O365%20domains%20in%20the%20same%20Microsoft%20tenant%2C%20or%20separate%20tenants%3F%20%26nbsp%3B%20If%20they%20are%20in%20the%20same%20tenant%2C%20then%20you%20should%20have%20no%20problem%20setting%20up%20Intune%2C%20SSSO%2C%20all%20that%20good%20stuff%20using%20a%20single%20Global%20Admin%20account.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EG%20Suite%20is%20another%20matter%20entirely%20though.%20%26nbsp%3BIf%20you%20want%20to%20manage%20your%20Suite%20domain%20in%20Azure%20AD%2C%20then%20that%20domain%20will%20have%20to%20be%20migrated%20into%20an%20M365%20tenant.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1428545%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20multiple%20O365%20tenants%20using%20single%20AAD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1428545%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3B%20Thanks%20Peter.%20The%202%20o365%20domains%20are%20in%20different%20tenant.%20What%20are%20my%20options%20in%20this%20case%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1428644%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20multiple%20O365%20tenants%20using%20single%20AAD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1428644%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F683723%22%20target%3D%22_blank%22%3E%40aditya333%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20want%20to%20centrally%20administer%20those%20domains%20with%20a%20single%20global%20admin%20account%2C%20then%20both%20domains%20will%20need%20to%20be%20in%20the%20same%20tenant.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1429245%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20multiple%20O365%20tenants%20using%20single%20AAD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1429245%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3B%20Thank%20You%20Peter%20for%20your%20time.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi, I have 3 domain - where  contoso has O365 , fabricam also has O365 and acmetoons has G-suite. Each domain has 100 users.

 

How can I bring all these 3 domain under one AAD and manage user policies using single admin account?

6 Replies

@aditya333 

 

Hi, you will need to decide which is the most logical of your two O365 tenants to migrate the other domains and accounts into.  Then I recommend using a third party tool such as BitTitan MigrationWiz to migrate the contents of the G-Suite environment and the other O365 tenant into your chosen target tenant.  

 

MigrationWiz will allow you to migrate not only your mailboxes, but also SharePoint/OneDrive/Teams content, and Google Drive content too.

 

I've completed many such migrations in this manner and had a very good experience.

Highlighted

@PeterRising   Thank you for your reply.  May be I framed my question wrongly. I don't want to migrate any of the 3 domains.

 

I only need 1 admin account in Azure AD through which I can apply policies using Intune, enable SSO which should get applied to all 3 domains( 2 Office365 domains & 1 G-Suite domain). Do you think it is possible?  Any suggestion would be highly appreciated. 

Highlighted

@aditya333 

 

OK, so a further question then.   Are the two O365 domains in the same Microsoft tenant, or separate tenants?   If they are in the same tenant, then you should have no problem setting up Intune, SSSO, all that good stuff using a single Global Admin account.

 

G Suite is another matter entirely though.  If you want to manage your Suite domain in Azure AD, then that domain will have to be migrated into an M365 tenant.

Highlighted

@PeterRising  Thanks Peter. The 2 o365 domains are in different tenant. What are my options in this case?

Highlighted
Solution

@aditya333 

 

If you want to centrally administer those domains with a single global admin account, then both domains will need to be in the same tenant.

Highlighted

@PeterRising  Thank You Peter for your time.