Azure Tenant Consolidation

Christophe Simiand-Buissonnet 1 Reputation point
2022-03-17T00:42:01.973+00:00

Hello,
I need prepare the Azure tenant (2 Azure tenants to another) and i need evaluate the capabilities and identify the possible ways to merge the identity. How i can list the SPN and applications identities before migration on each tenant? And what is the steps to migrate on target tenant ?
Thanks in advance

Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,782 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Marilee Turscak-MSFT 34,626 Reputation points Microsoft Employee
    2022-03-18T20:44:30.5+00:00

    Hi anonymous user,

    I understand that you are looking to merge Azure tenants into one and also list the service principal and application identities before migration.

    To list service principals in a tenant, you can use:

    Azure AD Powershell:

    Get-AzureADServicePrincipal   
    

    Or Azure RM Powershell:

    Get-AzureRmADServicePrincipal   
    

    To consolidate the tenants, you will need to manually add the new user objects in the Azure AD and provide the necessary permissions. There is no out-of-the box tool in Azure or Microsoft 365 that does this, so you will need to re-create the users and resources.

    Merging tenants is a relatively complex task and it is difficult to provide precise guidance for this, especially if you have larger tenants or have services outside of Azure AD such as Sharepoint and mailboxes. You can move entire subscriptions between tenants, but if you do that you will lose all of your RBAC assignments and not every resource can handle something like that. You will most likely need to recreate many of your resources.

    Depending on your needs, you can also look into Azure Lighthouse, which enables logical projection of resources from one tenant to another tenant. It does not, however, physically move data or resources.

    Another option would be to use the ADMT migration tool to consolidate the on-premises Active Directories and then synchronize them.

    Additional resources:
    Cross-tenant management experiences
    Merge/move two ADs and one Office 365 tenant to a new AD
    Microsoft 365 tenant-to-tenant migration
    Retrieve all service principals from the directory

    -

    If this answer was helpful to you, please consider "marking as answer" so that others in the community with similar questions can more easily find a solution.

    1 person found this answer helpful.
    0 comments No comments