How to create first-time tenant

Question

I wanted to start work on a 'hobby' project outside of work, so I signed-in to the Azure portal using my personal email address. I found that, for some reason, this was already linked to my work's Azure Active Directory, so I unlinked it.

And now, each time I look at a page in the portal, I'm told that I have RESTRICTED ACCESS, and a message appears (top-right corner) informing me of an authentication error.

When I follow the steps to create a new tenant I get an error page.

If I click on Switch directory I see only a GUID representing my work's AD that I have since left (with this account) and no other options.

What do I need to do to set up a new Azure Active Directory tenant with my own account?

---

Here is the full text of the message which shows each time I open a new page in the portal.

---

The portal is having issues getting an authentication token. The experience rendered may be degraded.

Additional information from the call to get a token:

Extension: Microsoft_AAD_IAM

Resource: self

Details: The logged in user is not authorized to fetch tokens for extension 'Microsoft_AAD_IAM' because the user account is not a member of tenant '827f50c0-b974-4942-b515-9414ca3726a4'. Error details: AADSTS50020: User account '{EmailHidden}' from identity provider 'live.com' does not exist in tenant 'Supertext AG Azure' and cannot access the application 'c44b4083-3bb0-49c1-b47d-974e53cbdf3c'(Azure Portal) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

Trace ID: c338e35f-d598-4541-9ad6-b668c9154900

Correlation ID: c5567571-2da0-4082-9ea7-2b38410c1cfb

Timestamp: 2023-03-26 07:42:56Z

Answer 1

Hi Andrew Jameson, I hope I can help you with this question.

If I understand you correctly, you have separated your private user account from your business organization. Now Azure always tries to log you into the business tenant, which is no longer possible.

Problem

Since you have left the business tenant as a guest user with your identity, Azure can no longer find your user there as an active user. To make this possible again, someone from the business tenant with the necessary permissions needs to re-invite you.

As soon as you create a Microsoft account, a default tenant is always created in the background. However, since your last access to Azure was most likely done through the business tenant, you now need to set your home tenant (default) as default again.

To do this, try the following:

1. 1. clear your browser cache ( all browser data) and reopen the browser.
2. go to https://login.microsoftonline.com and change the client ID with the ID of your home tenant

2.1 if you don't know your Home Tenant Id you can try to open [https://portal.azure.com/@your Tenantname].onmicrosoft.com (the TenantName is your personal Email Adress like firstname.surename.outlook)

Another option to find out the tenant ID is via Powershell:

Connect-AzAccount

Get-AzTenant

With the Get-AzTenant Cmdlet you should get all the tenants to where the user identity is authorized for.

3. enter your credentials, and you will get connected to the tenant that you have specified in the previous step.
4. 4. after logging in, you can change your default directory by using the below option:

---

If the reply was helpful, please don’t forget to upvote or accept it as an answer, thank you.