remove user from sphere tenant, company migrated to Office 365

Doug Hardy 31

I need to remove a user from Azure Sphere.

The user registered using a company email that was assigned to a Microsoft Tenant user.
The company has since migrated to Office 365 using Active Directory sync.
The existing registered user was removed so the AD user could sync.
When we try and register the user in Sphere it complete’s ok but the user can’t login.
The error is user is not found in Azure Sphere tenant.

I need to remove the user from Azure Sphere so it can be added again with the new user’s ID

QuantumCache 20,031 Reputation points

2020-10-09T19:56:20.607+00:00

Hello @Doug Hardy Thanks for reaching out to us,

Please let us know if you have followed any specific documentation for this Azure Sphere migration--Org or Individual?
Doug Hardy 31 Reputation points

2020-10-09T20:24:56.147+00:00

@QuantumCache we aren't migrating tenants.
The user can't login to Azure Sphere at all before trying to access a tenant.
QuantumCache 20,031 Reputation points

2020-10-09T20:29:32.583+00:00

Hello @Doug Hardy Thanks for the added info, I am checking with my team to get the info/document for this scenario.
QuantumCache 20,031 Reputation points

2020-10-09T20:58:05.777+00:00

Hello @Doug Hardy wanted to check on few things,

Is the account adding this user an admin on Sphere tenant?

Does the admin see this account (once they register) when they run azpshere role list command?

Is the user account in question, able to login or access other Microsoft services?
Doug Hardy 31 Reputation points

2020-10-09T21:04:34.747+00:00
Not adding as admin

The admin can see the user in the role list. But we think that is the existing user from the first account that was made. You can only see the email address and no other detail.

Yes the user can access all other microsoft services.

I've tested it outside this user and its the same.
Steps:

Create a user in MS Tenant test@test .com

Register this user in Azure Sphere

Delete that user in the MS Tenant. The user still shows in Azure Sphere

Create a new user in MS Tenant with same UPN

register new user in sphere with success message

user can't login. Error user is not in 'Azure Sphere' Tenant.

so it looks like the first user ID locks in the Azure Sphere and registering a new user with the same name does nothing
QuantumCache 20,031 Reputation points

2020-10-09T21:25:56.29+00:00

Hello @Doug Hardy , sorry for the inconvenience caused.

For a deeper investigation and immediate assistance on this issue, if you have a support plan you may file a support ticket.

Let me know immediately if you don't have any support plan.
Doug Hardy 31 Reputation points

2020-10-09T21:28:33.057+00:00

We dont have a support plan yet.
QuantumCache 20,031 Reputation points

2020-10-09T21:30:50.377+00:00

Hello @Doug Hardy , No worries,

Please send an email to azcommunity@microsoft.com with the below details, so that we can work closely on this matter.

Thread URL: Link to this thread.
Your Azure Subscription ID:
Email Subject : Attn Satish Boddu
Please let me know once you have done the same.
QuantumCache 20,031 Reputation points

2020-10-09T23:30:31.15+00:00

Hello @Doug Hardy , We have just sent an email regarding a quick support call. Just checking if you can respond to that email, if possible.

Accepted answer

QuantumCache 20,031 Reputation points

2020-10-12T23:29:54.893+00:00

Hello @Doug Hardy ,

After our discussion on this issue, we decided to submit a Microsoft support ticket to remove the user email ID which was previously registered with Azure Sphere Tenant. This will make sure that the user can register again with the Azure Sphere Tenant without any issues. We will make sure to capture this scenario as part of our Azure Sphere documentation. Thanks for your contribution to this forum.

We hope this info is useful to others as well with a similar situation.

Updated: 11/11/220 , Product-Bug
The old public Microsoft account needs to be removed everywhere so Graph API maps the email to the new AAD principal id. The Product team and support team investigated this & helped in removing the old account.

Microsoft Teams

Thank you,

Satish.
Azure CXP Team.
Redmond-WA, USA.
Please sign in to rate this answer.
QuantumCache 20,031 Reputation points

2020-10-30T00:52:45.717+00:00

Hello all,

Microsoft's AAD team is working on this issue, we are actively monitoring the progress.

Please stay tuned to this thread to get future updates.

Cc: @Doug Hardy , @Chandranmsft

QuantumCache 20,031 Reputation points

2020-11-16T22:07:28.763+00:00

<<Private message note: This is a private message which only you as Original Poster and Microsoft Moderators can view. Please respond directly to this comment to privately share the requested information. For your privacy, please do not share any Personal Identifiable Information (PII) as a public or private comment. All private messages on the thread will be deleted within 30 days.>>

Subject: Survey Feedback Check-in:
Hello @Doug Hardy ,
This is a follow up on requesting feedback on your experience.
We are awaiting your feedback on how we can make your experience a 5-star. We would really love your candid response on how we can make your experience better on the QnA platform.
We request you to provide us with your valuable feedback and look forward to providing great service.

Thank you.
Satish.
Sign in to comment

remove user from sphere tenant, company migrated to Office 365

0 additional answers