not able to move VM created from custom image getting error LinkedAuthorizationFailed: The current tenant is not authorized to access linked subscription

Question

not able to move VM created from custom image getting error LinkedAuthorizationFailed: The current tenant is not authorized to access linked subscription

PTechie 0

I'm trying to move a VM (vm-image) from one tenant (CSP subscription) to another tenant by first adding a PAYG subscription, changing its directory, and then using Azure Resource Move. But I'm getting the following error

{"message":"Resource move policy validation failed. Please see details. Diagnostic information:  subscription id '15xxxxx', request correlation id 'bxxxx'. (Code: ResourceMovePolicyValidationFailed) The client has permission to perform action 'Microsoft.Compute/images/read' on scope '/subscriptions/21xxxxx/resourcegroups/Prod-RG/providers/Microsoft.Compute/virtualMachines/vm-Image', however the current tenant 'bxxxxx' is not authorized to access linked subscription 'dxxxxxxxxxxx'. (Code: LinkedAuthorizationFailed, Target: Microsoft.Compute/Microsoft.Compute/virtualMachines/vm-image)","code":"ResourceMovePolicyValidationFailed","name":"BatchResponseItemError","stack":"BatchResponseItemError: Resource move policy validation failed. Please see details. Diagnostic information:  subscription id '15xxxxxx', request correlation id 'bxxx'.\n    at t (https://portal.azure.com/Content/Dynamic/MYbNINXhLuLV.js:41:815)\n    at new t (https://portal.azure.com/Content/Dynamic/MYbNINXhLuLV.js:61:11960)\n    at https://portal.azure.com/Content/Dynamic/MYbNINXhLuLV.js:61:4965\n    at Array.forEach (<anonymous>)\n    at https://portal.azure.com/Content/Dynamic/MYbNINXhLuLV.js:61:3220","status":409}

1 answer

Your answer

Answer 1

Deepanshu katara 16,790 MVP Moderator

Hello ,

I think You're trying to move or access a resource (like a VM image) across subscriptions or tenants, but:

The source subscription (21xxxxx) is under Tenant A (bxxxxx),
The target subscription (15xxxxx) is under Tenant B,
Your current user has permissions on the resource, but not across both tenants,
Azure blocks the operation due to Linked Authorization Failure.

How to Fix It

Confirm Tenant and Subscription Ownership

Go to the Azure Portal and check:
- Which Azure Active Directory (tenant) each subscription belongs to.
  - You can do this under Subscriptions > [Your Subscription] > Properties.

Ensure Both Subscriptions Are in the Same Tenant

Azure does not allow resource moves across tenants. You have two options:

Option A: Move the Subscription to the Same Tenant

If you control both subscriptions:

Go to Azure Portal > Subscriptions > Transfer billing ownership.
Or contact Microsoft Support to move the subscription to the same tenant.

Option B: Recreate the Resource in the Target Tenant

If you can’t move the subscription:

Export the VM image (or resource),
Recreate it in the target tenant/subscription manually.

Grant Proper Permissions

If the subscriptions are in the same tenant:

Ensure your user has Contributor or Owner role on both subscriptions.
Also check Azure Resource Move policies under:
- Azure Policy > Assignments — look for any policies blocking resource moves.

Pls check and let us know if any further ques

Kindly accept

Thanks

Deepanshu

PTechie 0 Reputation points

2025-07-03T06:42:40.8733333+00:00

Hi Deepanshu Katara,

Thanks for the revert.

We're facing an issue while moving a VM resource between subscriptions in two CSP tenants using Azure Resource Mover. Here’s the scenario,

Tenant A (1exxxx) had a CSP subscription (dxxxx) with all the resources.

We added a PAYG subscription (15xxxxx) to Tenant A and moved the resources from the CSP subscription to PAYG — this worked fine.

Then we changed the directory of the PAYG subscription to Tenant B (bxxxxx), which already has a CSP subscription (21xxxxx).

Now, while trying to move resources from the PAYG (15xxxxx) to the CSP (21xxxxx) within Tenant B, we’re facing an issue only with the VM, specifically

LinkedAuthorizationFailed: the current tenant 'bxxxxx' is not authorized to access linked subscription 'dxxxx'.

(Target: Microsoft.Compute/virtualMachines/vm-image)

Notes

The VM was originally created using a custom managed image in the old CSP (dxxxx) in Tenant A.

Other resources (Marketplace-based) were moved successfully — this issue only occurs with this VM.

The user has **Owner role in all subscriptions and is a Global Admin in both tenants.

Question** How can we remove or update the VM’s reference to the original image in the old tenant so the move succeeds?
Or is there any alternate solution for this ?
We cannot recreate or delete the VM due to complexity.
Naveena Patlolla 3,850 Reputation points Microsoft External Staff Moderator

2025-07-10T01:01:22.6+00:00

Hi PTechie

The error occurs because your VM in Tenant B's PAYG subscription (15xxxxx) still has dependencies on resources in Tenant A's original CSP subscription (dxxxx), specifically the custom managed image used to create the VM.

In the same subscription it will work Resource move successfully, but you are preforming in different tenants so please find the solutions below.

Solution 1: Export all VM disks to VHD format in PAYG subscription (15xxxxx)

Use AzCopy to transfer VHDs to storage in target CSP subscription (21xxxxx)

Create new managed disks from the VHDs

Build new VM using these disks

Solution 2: Use Azure migrate to Migrate server from 1 Subscription to another subscription which are in different tenants.

https://learn.microsoft.com/en-us/azure/migrate/tutorial-migrate-physical-virtual-machines?view=migrate-classic

let us know if you have any further queries. I’m happy to assist you further.

If the comment was helpful, please click "Upvote"

Share via

not able to move VM created from custom image getting error LinkedAuthorizationFailed: The current tenant is not authorized to access linked subscription

1 answer

Your answer