Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,938 questions
What is best solution to separate Azure account (Tenant)?
Mohsen Akhavan
811
Reputation points
Hello everyone,
I'm looking for the best solution or best practice for this scenario. Currently, I have an Azure account that I separated two environments (Development and Production) with Management Group and Subscription.
Based some reason, I want to separate these two environments through two Azure accounts. One for development and one for production.
My question is:
- What will happen to my user's account? How can I connect two tenants together?
- How do users from the development tenant, have access to the Production tenant?
- Is there another suggestion?
{count} votes
-
Diego Martos 5 Reputation points Microsoft Employee2023-10-30T21:50:10.3666667+00:00 Hi Mohsen, different tenants, different local Identities. The only cases I have personally seen so far to justify two Entra-ID (AAD) Tenants as Pre-Production and another for Production is to test Identity Governance level features or architectures that could impact production, but similar testing could also be done for ID feature with subset of accounts and Security Groups in the same tenant, just organizing Identity Accounts for testing from other users.
If your goal is only to isolate production from non-production workloads at Cloud Computing (under Azure Subscription), with the information provided I can't think of an use case to separate the tenants. That also will cause extra billing as separate invoices depending on the commercial agreement you have.
Sign in to comment
Sign in to answer