Share via

Unable to manage Azure AD B2C

Rob Hofmann 26 Reputation points
2021-08-18T12:53:48.28+00:00

Hi all,

We are trying to manage an AAD B2C instance, but we are running into some issues. I hope someone can aid us.

My work account is registered in our AAD instance. Lets call this Tenant X.

Recently we've bought another company who has it's own AAD instance. Lets call this Tenant Y. However, we are able to use our Tenant X accounts to manage the subscriptions in their directory. We've also been added to their Tenant Y AAD with our Tenant X accounts as being Global administrators. This all works like a charm.
Next we are trying to manage the new Tenant Y AAD B2C instance(s), but we don't seem to have permission there, even though our Global administrators role.

I'm sure we are doing something wrong, but i have no clue what. The admin from Tenant Y looked at this, and we have the same groups & permissions as far as we can see. Are we missing something? We need to to create a trust between Tenant Y B2C and our Tenant X AAD?

I hope someone can shine a light on this.

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,775 questions
0 comments
Accepted answer
  1. AmanpreetSingh-MSFT 56,506 Reputation points
    2021-08-19T13:41:19.877+00:00

    Hi @Rob Hofmann • Thank you for reaching out.

    When an Azure AD B2C instance is created, it creates a separate tenant. So, referring to it as Tenant Y is incorrect, as there is already an Azure AD Tenant named Tenant Y exists. This means, with creation of B2C instance, Tenant Z is created and if you have Global Admin rights on Tenant Y, you will not have same rights in Tenant Z.

    In order to manage the B2C tenant using same account that you are using to manage Tenant X and Tenant Y, add your account as guest account to B2C tenant and assign it with Global Administrator role.

    For this purpose:

    1. Sign in to Azure Portal with Global Admin of the B2C tenant and make sure you are in the B2C directory.
    2. Navigate to Azure Active Directory > Users > +New guest user > Provide your email address and other details > Invite.
    3. Once the invitation redemption is done, login to Azure portal and you can use switch directory option to switch to any Tenant (X/Y/Z)

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest