Subscription migration to different Tenant

Azuretech 90 Reputation points
2023-03-22T12:24:39.94+00:00

Is it possible to migrate below resources in a subscription from one tenant to another tenant. We are planning subscription migration from one tenant to different tenant

I have gone through below documentation https://learn.microsoft.com/en-us/azure/role-based-access-control/transfer-subscription but it doesnt talk about below resource and what additional things i need to take care before and after subscription migration to new tenant.

1- App service, app gateway

2- Private end point

3- SQL server and database

4- bastion

5- application insight

6- restore point collection

7- event hub name space

8- loganalytics workspace

9- function app

10 - recovery service vault

Could you please let me know is it possible to migrate these resources and things that need to take care prior to migration.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
660 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Sedat SALMAN 13,075 Reputation points
    2023-03-23T08:37:17.2366667+00:00

    Yes, it's possible to migrate the resources you mentioned from one tenant to another tenant by transferring the subscription they reside in. When you transfer a subscription to a new tenant, all resources within the subscription are transferred as well. However, there are some considerations to keep in mind before, during, and after the migration process.

    Before migration:

    1. Ensure that you have the required permissions for transferring the subscription: Global Admin role in the source tenant and the destination tenant.
    2. Review the resources you're migrating for any dependencies on other resources or services in the source tenant. This may include identity-related dependencies, such as Azure AD users, groups, or app registrations. You'll need to recreate or reconfigure these dependencies in the destination tenant.

    During migration:

    1. Follow the steps outlined in the Microsoft documentation to transfer the subscription: https://docs.microsoft.com/en-us/azure/role-based-access-control/transfer-subscription

    After migration:

    1. Reconfigure any dependencies on Azure AD, such as users, groups, or app registrations, in the destination tenant.
    2. Update the role assignments and access control settings to use the new Azure AD tenant.
    3. Reconfigure Private Endpoints and DNS settings, if necessary.
    4. Update any external systems or integrations that depend on the resources you migrated, such as DNS configurations, API endpoints, or connection strings.
    5. Review and reconfigure custom domains and SSL certificates for App Services and App Gateway.
    6. Reconfigure authentication and authorization settings for App Services, Function Apps, and other resources that use Azure AD.
    7. Reconfigure Log Analytics Workspace settings and ensure that data ingestion and queries work as expected.
    8. Review and reconfigure backup and recovery settings in the Recovery Services Vault.
    9. Ensure that monitoring and alerting with Application Insights and Event Hubs are working as expected.
    10. Test the functionality of your migrated resources to ensure that they are operating correctly.

    Remember that although most resources will migrate seamlessly, some configurations and settings may require updates or reconfiguration after the migration. It's essential to thoroughly test and validate your resources to ensure they work as expected in the new tenant.