List tenants for current user without user_impersonation on Azure manament api

Stephan van Rooij 156 Reputation points

I'm looking for a way to access a list of tenants the current user, so the home tenant and tenants where he/she is invited as guest.

I know the existence of List Tenants in the Azure management api, but that API only has ONE scope, namely 'user_impersonation'. This is a bad thing for several reasons:

  1. Users probably won't allow our application to control their entire Azure subscriptions
  2. If an admin would allow us access to this scope, it could lead to some really bad stuff happening (account take over, removing all items from their azure subscription, just to name a few)

This is also described here

It would be great if this would come on the radar of the Graph development team, it would be great if there was a way in the Graph API to just list the tenants a user is a member of with either a Tenants.Read scope (new), or to be able to access this information with the 'User.Read' or 'profile' scope.

Our use case also doesn't need all the details as provided by the Azure Resource Api, the Id, Name and Home/Guest fields would suffice.
Something like:

    "id": "896a4689-1e14-4572-9375-028c2449d145",  
    "name": "Tenant A",  
    "userTenant": "Home"  
    "id": "f4af3776-fb13-470f-86ae-1c185a4c2e63",  
    "name": "Tenant b",  
    "userTenant": "Guest"  
    "id": "ae287e2c-979e-4590-a51a-729f42adbbe2",  
    "name": "Tenant C",  
    "userTenant": "Guest"  

I also asked this question on twitter, where the Azure Support team refered me to this page

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
915 questions
No comments
1 vote

2 additional answers

Sort by: Most helpful
  1. Deva-MSFT 2,231 Reputation points Microsoft Employee

    Please file the feature request so that it can be considered to be implemented.

  2. Deep Singh 1 Reputation point

    Any updates on this? :)