I am attempting to change the active directory of a newly created EA subscription, from my companies AD to a new AD that I created in the sub. According to https://www.itunity.com/article/how-to-change-the-default-directory-for-an-existing-azure-subscription-2494 and other sites, it is simple as clicking the edit directory button. But when I goes to the list of subscriptions in the old azure portal, that button does not appear.
My guess is that the portal isn’t allowing this due to the fact that it is an EA subscription. Because when I logged into my own personal subscription, which is not EA, the button appears as expected. Is this in fact the reason?
Any help would be really appreciated.
Thanks
Correct, it is because you have signed in with a Work account.
"The Edit Directory command in the Azure classic portal is not available to users who are signed in using a work or school account because those accounts can sign in only to the directory to which they belong."
See this link for more:
https://azure.microsoft.com/en-us/documentation/articles/active-directory-understanding-resource-access/
Related
We have Azure DevOps portal for our organization and our Active Directory is connected to it. I have enough privileges to add new users to the DevOps portal.
Recently I have seen that whenever I am trying to add new users I am getting the below error:
The user is added to the AAD. He is an active user and belongs to the same organization. I have cleared the cache and tested it.
Still, I am unable to add the user because of the issue.
Is there anything that I can do to rectify this, before approaching the support?
You are trying to invite a use from outside your directory. ...
To solve this issue, you need to grant the Guest Inviter role to your account in Azure AD(Active Directory).
You could navigate to Azure Portal -> Azure Active Directory -> Roles and administrators -> Search Guest Inviter.
Then you could assign the Guest Inviter role to your account.
In this case, you could invite the user successfully.
For more detailed info , you could refer to this doc about Add external users to your organization.
It's been a couple of hours since your question posted. Does it work now? Your statement that the user is in your AAD, plus the error message that the user is outside your directory, suggests the possibility that maybe waiting might fix it.
I am unable to delete the b2c tenant created by me during a lab demonstration of how to integrate social IDP to a web app. I followed and completed all the processes but the delete tenant button stays greyed out.....It says "Remove Domain Services"...and has been stuck on there ever since1... Click on the Hyperlink to view image
remove domain services error
But once i click there to remove it...It displays nothing....
After clicking on "Remove Domain services"
According to the link provided by #Raghavendra- MSFT Identity.We can create an user account named like 'admin#personal_b2c_account.onmicrosoft.com' in B2C directory, and assign the 'global administrator' role. Logging in as this user, there will be no error to remove domain services, only to remove users. Removing the personal account from the B2C directory, and we are able to delete the directory after that.
And click Azure AD Domain Services in the picture shown, the welcome to azure! interface will also appear.It seems to be a bug in the system. Because the domain services error will only come if you ever had enabled Azure AD domain services on your environment.
I am almost new to Azure. My client had created an Azure account and sent invitation to me. I had accepted her invitation to join her Azure portal. However when I log in with my username, it shows me "No subscription". My client is saying she has given me every access rights, but I am not able to do anything there. Even I am not sure if I have really joined her Azure portal.
Here is the image if when I tried to access Free Services.
For what i understand is that the current directory you are working in doesn't have the rights that you are expecting. And your client has added you to another subscription with all the required rights. All you need to do is switch your directory to the one which has the subscription provided by your client.
Just Click on your profile avatar(or name) on the top right of the portal.
Select the option Switch Directory form the pop-up.
And choose your concerned directory + Subscription.
I created a corporate developer account in Microsoft Partner Center, and verified domain. But I didn't go through all the other corporate verification steps. Now I wonder how could I remove the domain from Microsoft Partner Center, or close this account (I am the owner).
It seems that the "Remove" (not clickable) is a text not a button in the screenshot.
Also when I login to azure portal, and follow this document to delete Azure AD directory, the "Delete directory" button is greyed out (not clickable). The weird thing is that my role is User. Should I be administrator since I am Owner in Partner Center? Who will be admin if my role is "User" since I have only one account. Is there a way to delete the tenant?
I have two businesses and each has an Azure subscription. I'm an admin for each using my same MS email account.
Bill is only involved in one of the subscriptions, but when I log into my subscription "Local Happenings" (to which Bill should have no access) I still see his email address in the URL.
This picture shows it better:
https://db.tt/kvuccFOO
I'm wondering why this is, and if it could potentially be a problem.
My fear is that if he decides to cancel his business's account, then he will cancel mine or something.
I tried again to create a new subscription to verify I wasn't already logged into his subscription (I used a different browser), but it still shows his email address in the URL.
Anyone have any ideas?
UPDATE 1:
https://db.tt/QHJrfIno
I see that my subscription is under his "default directory". I never selected this when creating my subscription. How do I change this, and is it the culprit?
What shows under the "Active Directory" tab in the management portal for each Subscription? When you say "MS email account" is that an old hotmail-type account or one registered via Office 365 or Azure?
The fact that the account showing in the URL has #XXX.onmicrosoft.com address suggests there is a link back to an Azure Active Directory (AAD) instance. If this is shared between the subscriptions (potentially as a login from it was used to create on of the subscriptions) then this would be the cause.
You need to make sure a non-AAD account is an admin on the subscription so that removal of an associated Azure AD instance will not orphan the subscription.
Have a read of the AAD documentation here for more information: http://msdn.microsoft.com/library/azure/dn629581.aspx