Changing azure tenant from external to internal blocks all my azure subscriptions and lost all the data what to do?

Question

I recently changed my azure tenant from external to internal user and then I no longer see my azure subscription or signing account resources. How can I get them back? I am seeing these errors

{
  "sessionId": "218eeb4e7da4435da7712431ff74706f",
  "errors": [
    {
      "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'e6694c91-1590-4e35-9bb7-b865c638b9c1'(Microsoft_Azure_SupportPortalExtension) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 12679ff5-7f14-4e89-a2c6-588589501500 Correlation ID: 1a34572a-a6f8-4586-88d9-2fac7e3ffd44 Timestamp: 2026-04-07 10:41:42Z",
      "clientId": "e6694c91-1590-4e35-9bb7-b865c638b9c1",
      "scopes": [
        "959678cf-d004-4c22-82a6-d2ce549a58b8/.default"
      ]
    },
    {
      "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'e6694c91-1590-4e35-9bb7-b865c638b9c1'(Microsoft_Azure_SupportPortalExtension) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 12679ff5-7f14-4e89-a2c6-588589501500 Correlation ID: 1a34572a-a6f8-4586-88d9-2fac7e3ffd44 Timestamp: 2026-04-07 10:41:42Z",
      "clientId": "e6694c91-1590-4e35-9bb7-b865c638b9c1",
      "scopes": [
        "959678cf-d004-4c22-82a6-d2ce549a58b8/.default"
      ]
    },
    {
      "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'e6694c91-1590-4e35-9bb7-b865c638b9c1'(Microsoft_Azure_SupportPortalExtension) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 12679ff5-7f14-4e89-a2c6-588589501500 Correlation ID: 1a34572a-a6f8-4586-88d9-2fac7e3ffd44 Timestamp: 2026-04-07 10:41:42Z",
      "clientId": "e6694c91-1590-4e35-9bb7-b865c638b9c1",
      "scopes": [
        "959678cf-d004-4c22-82a6-d2ce549a58b8/.default"
      ]
    },
    {
      "errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'e6694c91-1590-4e35-9bb7-b865c638b9c1'(Microsoft_Azure_SupportPortalExtension) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: 12679ff5-7f14-4e89-a2c6-588589501500 Correlation ID: 1a34572a-a6f8-4586-88d9-2fac7e3ffd44 Timestamp: 2026-04-07 10:41:42Z",
      "clientId": "e6694c91-1590-4e35-9bb7-b865c638b9c1",
      "scopes": [
        "959678cf-d004-4c22-82a6-d2ce549a58b8/.default"
      ]
    }
  ]
}

Answer 1

Hello DeveloperLook LLC,

Error AADSTS16000 is thrown when the user not found in the tenant used for authentication. In your case, this error usually occurs when you sign in to Azure Portal using your personal account which is not added as an external/guest user to an Azure AD tenant. Due to this, you by default get connected to the Microsoft Services tenant.

Since you are connected to the Microsoft Services tenant as a standard user with restricted access, you cannot perform actions such as creating new users, groups, enterprise applications, and so on. To perform administrative actions, you must have administrative access to the tenant.

For this purpose, you need to create your own tenant rather than using the Microsoft Services tenant. When you create a new tenant, you by default become the Global Administrator of the new tenant and have full access to all the options in that tenant.

To create a new tenant, open in-private/incognito browser window (just to avoid SSO), access Create Your Azure Free Account Or Pay As You Go | Microsoft Azure to create a free Azure account.

Once the new account is created, you should be able to see and switch to the new tenant by clicking on the settings icon as highlighted below:

In some cases, the user might already have an active session that uses a different personal account than the one that's intended to be used. Or they have a session that uses their organization account although they intended to use a personal guest account (or vice versa).

In that scenario, try signing in to the Azure Portal trough a tenant-specific URL using the following format:

https://portal.azure.com/<tenant domain name>

Eg.

https://portal.azure.com/constoso.onmicrosoft.com

Answer 2

The error indicates that the current account being used to sign in doesn’t exist in the tenant that Azure is trying to use, so the portal and Support extension can’t get tokens and your subscriptions don’t appear.

Based on the provided information, the following actions are supported:

1. Verify and switch to the correct directory/tenant in Azure portal:
   • In the Azure portal, select the account avatar in the top-right corner.
   • Choose Switch directory and select the directory that originally contained the subscriptions.
   • If the wrong directory is selected, the portal shows No subscriptions found even though subscriptions still exist in another directory.
2. If the correct directory is already selected but subscriptions are still missing:
   • Ensure that the current signed-in identity has sufficient permissions on the subscription.
   • The identity must be assigned at least the Owner role on the subscription. If necessary, have an administrator assign the Owner role to the account that should manage the subscription.
3. If sign-in keeps defaulting to another account or directory:
   • Clear browser cache and cookies, or use a private/incognito window so that only the intended account is used.
   • Then sign in again to the Azure portal and repeat step 1 to select the correct directory.

If the subscriptions are in a tenant that has become inaccessible due to inactivity (error AADSTS5000225), the tenant administrator must contact Microsoft support within the allowed reactivation window to restore access to that tenant before subscriptions and resources can be managed again.

If none of these steps restore visibility of the subscriptions and there is no access to an administrator in the original tenant, a support request with Microsoft is required to investigate the tenant and subscription ownership.

---

References:

• Troubleshoot Azure subscription sign-in issues
• No subscriptions found sign in error for Azure portal
• Change Directory Tenants with your Azure Subscriptions
• Tenant inaccessible due to inactivity
• Error AADSTS50020 - User account from identity provider does not exist in tenant
• Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
• 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
• Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A
• Can not access Azure - Microsoft Q&A