Moving subscription to another directory removed my access to it

Alessio Rosa 0 Reputation points
2025-01-15T17:19:57.61+00:00

I two directories A and B and a VS enterprise subscription. I am a global admin for directory A. I moved the sub from A to B and then again from B to A. Now I can no loger access the subscription for some reason. It says that I am not authorized even though I am a global admin for the directory. Is there any way to fix it?

Microsoft Entra
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Sandeep G-MSFT 20,721 Reputation points Microsoft Employee
    2025-01-17T04:07:12.2166667+00:00

    @Alessio RosaThank you for posting this in Microsoft Q&A.

    As I understand you moved the subscription to another tenant earlier and moved it back to your old tenant. Now you are unable to access the subscription.

    As you mentioned you are the Global Admin in both the directories.

    To move the subscription to another directory you need to have Owner permission on the subscription. Global admin is a role with permission which are defined within the directory. And Owner role is set of permissions which is assigned on a subscription

    As per process, once you move the subscription to another directory you will lose the RBAC roles which were assigned earlier on the subscription.

    As per our public document when you move the subscription all role assignments and custom roles in Azure role-based access control (Azure RBAC) are permanently deleted from the source directory and are not transferred to the target directory.

    In your case you will have to contact the owner of subscription to get role assigned as per your requirement.

    Let us know if you have any further questions.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.