Private end point migration to different Tenant

Azuretech 90 Reputation points
2023-03-22T12:26:11.8433333+00:00

is it possible to migrate a private end point and private DNS zone from one tenant to different tenant through subscription migration ?

Azure Private Link
Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
461 questions
{count} votes

Accepted answer
  1. Erkan Sahin 830 Reputation points
    2023-03-25T17:22:54.8033333+00:00

    Yes, it is possible to migrate a private endpoint and private DNS zone from one tenant to a different tenant through subscription migration, but it requires careful planning and coordination between the tenants.

    Here are the general steps you would need to follow:

    1. Create a new subscription in the target tenant, if it doesn't exist already.
    2. Export the private endpoint configuration and private DNS zone settings from the source subscription using Azure Resource Manager (ARM) templates or Azure PowerShell.
    3. Modify the exported configuration to replace references to resources in the source subscription with corresponding resources in the target subscription. This includes updating the Resource Group, Subscription ID, and Tenant ID.
    4. Import the modified configuration into the target subscription using ARM templates or Azure PowerShell.
    5. Test the private endpoint and private DNS zone to ensure that they are working correctly in the target subscription.

    Note that there are several limitations and considerations to keep in mind when migrating private endpoints and private DNS zones across tenants, such as:

    • The private endpoint and private DNS zone must be in the same region as the resources they are connecting to.
    • The target subscription must have access to the virtual network and resource group where the private endpoint and private DNS zone are located.
    • The target subscription must have the necessary permissions to access the resources being connected to via the private endpoint.
    • If the private endpoint and private DNS zone are being used by other resources in the source subscription, those resources will need to be updated to use the new private endpoint and private DNS zone in the target subscription.

    It is also important to involve all stakeholders in the migration process, including network administrators and application owners, to ensure a smooth and successful migration.

    I hope this answer will be helpful :-)

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Patchfox 3,621 Reputation points
    2023-03-22T16:15:43.5933333+00:00

    Hi Azuretech, I hope I can help you with this question.

    Unfortunately, this is not possible with Azure only.

    The only possibility is here to transfer a complete subscription to another owner.


    If the reply was helpful, please don’t forget to upvote or accept it as an answer, thank you!