Enterprise applications - are they tied to one Azure subscription or can they be moved

Question

We are moving away from a CSP/MSP model and have Enterprise Applications. We added our own Azure subscription within the same tenant.

If they are no longer part of us, will those be lost?

Answer 1

Hello @Josie Lewis

Thank you for posting your query on Microsoft Q&A platform.

Enterprise Applications are NOT tied to an Azure subscription. They are tenant‑level objects in Microsoft Entra ID (Azure AD).

If you move away from a CSP/MSP model and add or change Azure subscriptions within the same tenant, your existing Enterprise Applications will NOT be lost.

They remain available as long as:

• The Microsoft Entra ID tenant remains the same
• The Enterprise Application is not explicitly deleted

Changing, adding, or transferring Azure subscriptions does not delete or move Enterprise Applications.

Microsoft defines Enterprise Applications as objects that are added to and managed within a Microsoft Entra ID tenant, independent of Azure subscriptions.

Reference: https://learn.microsoft.com/entra/identity/enterprise-apps/add-application-portal

2. Azure subscriptions are billing and resource containers only:

Microsoft clearly separates identity (tenant) from billing/resources (subscription).

• Subscriptions are used for billing and Azure resources
• Identity objects (users, groups, app registrations, enterprise applications) live in the tenant

Reference: Subscriptions, licenses, accounts, and tenants for Microsoft cloud offerings https://learn.microsoft.com/microsoft-365/enterprise/subscriptions-licenses-accounts-and-tenants-for-microsoft-cloud-offerings

3. Each subscription is linked to a tenant but does not own tenant objects.

• A subscription is associated with a tenant
• Tenant objects are not deleted when subscriptions change

Reference: Azure tenant vs Azure subscription – core concepts https://learn.microsoft.com/azure/active-directory/fundamentals/active-directory-whatis

• Enterprise Applications are not deleted
• App registrations are not removed
• SSO, consent, and assignments remain intact

Below provided Permissions may change:

• Subscription‑level RBAC (Owner/Contributor)
• Billing ownership (CSP → PAYG / EA / MCA)

These changes do not impact Enterprise Applications.

According to Microsoft behavior, Enterprise Applications are removed only if:

1. The tenant itself is deleted
2. The Enterprise Application is manually deleted
3. You move to a different tenant (not just a different subscription)

Thanks,

Suchitra.

Answer 2

Enterprise applications (service principals and their app registrations) are tied to the Microsoft Entra tenant, not to a specific Azure subscription.

Key implications for the CSP/MSP exit scenario described:

1. Tenant is the anchor, not the subscription
   • As long as the Microsoft Entra tenant remains the same, enterprise applications in that tenant continue to exist, regardless of which Azure subscription is used for billing or resources.
   • Adding a new Azure subscription "within the same tenant" does not remove or recreate enterprise applications; they stay in the tenant directory.
2. Subscription moves vs. tenant changes
   • Moving resources or subscriptions between offers (for example, CSP → pay-as-you-go) requires that source and destination subscriptions are in the same Microsoft Entra tenant to move resources cleanly.
   • When changing which subscription is used (for example, moving away from a CSP subscription to a direct subscription), enterprise apps remain because they are directory objects, not subscription-scoped objects.
3. When enterprise apps could be lost
   • Enterprise applications would be lost only if the underlying Microsoft Entra tenant is no longer accessible or is deleted, or if the CSP/MSP controls a different tenant and the enterprise apps were created in that partner-controlled tenant.
   • If the CSP subscription is in a different tenant and that tenant is no longer administered for the organization, those enterprise apps remain in that CSP-controlled tenant and are not automatically moved to the new subscription/tenant.
4. Ensuring continuity when leaving CSP/MSP
   • Ensure that the new subscription is associated with the same Microsoft Entra tenant that currently holds the enterprise applications. See Associate or add an Azure subscription to your Microsoft Entra tenant.
   • If moving resources between subscriptions (for example, from CSP to a new direct subscription) within the same tenant, follow the Azure Resource Move guidance and prerequisites, including same-tenant requirement and supported resource types.

In summary: if the new subscription is in the same Microsoft Entra tenant and that tenant remains under the organization’s control, enterprise applications are not lost when moving away from a CSP/MSP billing model.

---

References:

• Transfer Azure subscriptions between subscribers and CSPs
• Subscription considerations and recommendations
• Move Azure resources to a new resource group or subscription
• Subscriptions, licenses, accounts, and tenants for Microsoft's cloud offerings