delete tenant

Question

I want to delete the tenant, but can not do it, as Azure subscription 1 is not unsubscribing. This kind of message appears

You do not have permission to cancel this subscription

You must have an owner role for the subscription. Find an owner at Access control (IAM) and ask them to grant you this role.

Answer 1

Hello Temp admin,

Greetings! Thanks for raising this question in Q&A forum.

I completely understand how frustrating this is! The error you're seeing "You do not have permission to cancel this subscription" happens because an account administrator without the subscription Owner role cannot cancel an Azure subscription. But here's the good news if you are the Global Administrator of the tenant, you can elevate your own access to gain Owner-level control over the subscription and then proceed with the cancellation and tenant deletion. Let me walk you through this step by step.

Step 1: Elevate your access as a Global Administrator This is the key unlock. Follow these steps to elevate access as a Global Administrator:

1. Sign in to the Azure Portal as Global Administrator
2. Browse to Microsoft Entra ID > Manage > Properties
3. Under "Access management for Azure resources", set the toggle to Yes and save

When you set this toggle to Yes, you are assigned the User Access Administrator role in Azure RBAC at root scope — this grants you permission to assign roles in all Azure subscriptions within the tenant.

Step 2: Assign yourself the Owner role on the subscription After elevating access:

1. Go to the Azure Portal > Subscriptions > select "Azure subscription 1"
2. Click Access control (IAM) > Add > Add role assignment
3. Select the Owner role
4. Assign it to your own account
5. Click Save and wait a minute for it to take effect

Step 3: Cancel the subscription Now that you have the Owner role:

1. Go to the Azure Portal > Subscriptions > select "Azure subscription 1"
2. Click Overview > Cancel subscription
3. Follow the cancellation steps and confirm

Step 4: Make sure all prerequisite checks pass before deleting the tenant Before you can delete the tenant, Microsoft requires the following to all be true. No subscriptions for any Microsoft Online Services offerings such as Azure, Microsoft 365, or Microsoft Entra ID P1 or P2 must be associated with the organization. You must also ensure there are no users in the tenant except one Global Administrator responsible for the deletion delete any other users first. Additionally, all outstanding invoices and amounts must be paid.

So after cancelling the subscription, also check for and remove any Microsoft 365 licenses, app registrations, and other users in the tenant.

Step 5: Delete the tenant Once everything is cleaned up: Sign in to the Microsoft Entra admin center as a Global Administrator, select Microsoft Entra ID, go to the tenant's Overview page, select Manage tenants, check the checkbox for the tenant you want to delete, and select Delete.

Step 6: Remove elevated access after you're done Once you have made the changes you needed, remove the elevated access go back to Microsoft Entra ID > Properties and set the "Access management for Azure resources" toggle back to No. This is best practice even though you'll be deleting the tenant anyway.

Step 7: Contact Microsoft support if the tenant deletion still fails Microsoft is aware that customers with certain tenant configurations might be unable to successfully delete their Microsoft Entra organization and is working to address this problem. If you need more information, contact Microsoft support.

If this answer helps you kindly accept the answer which will help others who have similar questions.

Best Regards,

Jerald Felix

Answer 2

To delete the tenant, all Azure subscriptions in that tenant must first be canceled and (where applicable) deleted. The error shown means the current account is not a subscription owner, so it cannot cancel the subscription.

Use these steps:

1. Identify who can cancel the Azure subscription
   For Azure subscriptions created via the Azure website (Free, Pay-As-You-Go, Visual Studio, EA, Azure plan, etc.), only the subscription owner can cancel it. An account administrator without the subscription owner role cannot cancel the subscription.
   • In the Azure portal, go to the problematic subscription → Access control (IAM) → Role assignments and look for users/groups with the Owner role.
   • Contact one of those owners and ask them either:
     • To cancel the subscription for you, or
     • To grant the Owner role on that subscription to the account that needs to perform the cancellation.
2. Have the subscription owner cancel the subscription
   Once an owner is identified, they should follow the standard cancellation path described in Cancel and delete your Azure subscription. Only after the subscription is canceled (and, for some offers, deleted after the waiting period) will the tenant deletion checks pass.
3. Delete the subscription (if applicable) and then the tenant
   • For free trial or Pay-As-You-Go subscriptions, the Delete subscription option becomes available a few days after cancellation. After deletion, Microsoft retains data 30–90 days before permanent removal.
   • After all subscriptions in the tenant are canceled and deleted (or in the required terminal state), return to Microsoft Entra ID in the Azure portal and run the Delete directory flow to remove the tenant.

If no current subscription owner is available, the only supported path is to work with that owner (or the organization that controls that account) to either transfer ownership or have them perform the cancellation.

---

References:

• Cancel and delete your Azure subscription
• Delete a tenant in Microsoft Entra ID
• Protect tenants and subscriptions from abuse and fraud attacks
• Quickstart: Create a new tenant in Microsoft Entra ID