What all resources gets migrated when migrating a subscription from one tenant to another tenant

Sushma Murali 0

Hello All,

We are planning to migrate few of our subscriptions from one tenant to another tenant. Each subscription has combination of resources. I would like to understand what all resources are impacted due to migration. Already referred the MS article: https://learn.microsoft.com/en-us/azure/role-based-access-control/transfer-subscription

However, the article does not speak anything about the below set of resources:

Event Grid System Topic

Virtual machine scale set

Runbook

Metric alert rule

Container registry webhook

Load balancer

Azure compute gallery

Data collection rule

Container instances

Automation Account

Container registry

Image

Private DNS zone

Availability set

Activity log alert rule

SaaS(Skytap Service)

Restore Point Collection

Recovery Services vault

Azure Managed Instance for Apache Cassandra

Elasticsearch (Elastic Cloud)

Route table

Azure Workbook

Azure Database for PostgreSQL single server

Azure Cache for Redis

Log Analytics query pack

Face API

SQL database

App Service plan

SQL server

DNS zone

Managed database

Virtual cluster

I have researched and spent lot of days in finding the concrete answer for the migration of above resources but no luck :( :( :(

I want a confirmation what resources mentioned above can be migrated to another tenant.

Also does it mean that all the resources apart from the ones mentioned in the above Microsoft URL can be migrated ?

This is becoming very urgent for me now, therefore any assistance and inputs might be really appreciated.

Thanks & Regards,

Sushma.

SadiqhAhmed-MSFT 48,256 Reputation points Microsoft Employee

2023-06-05T06:48:01.6266667+00:00
Hello @ Sushma Murali Thank you for contacting us on Microsoft Q&A platform. Happy to answer any question you may have!

I see that you have question about moving subscription across tenants. Individual Resources cannot be moved across tenants - but Subscriptions can.

(Please note that I had appropriate access in each Tenant, but I think it should still be possible in coordination with some else with appropriate permissions in the other tenant).

Create a new Subscription: transfer-sub.

Create a resource group: transfer-rg

Move all resources that need to be transferred to the new tenant into transfer-rg. (https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-resource-group-and-subscription). Follow the guidance given for different resources (https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-resource-group-and-subscription)

Before proceeding with the next steps: wherever possible backup data and export ARM templates of the resources you are transferring.
Save any Users/Service Principals, Custom role definitions and Role assignments that the subscription currently work with the subscription and recreate them in the new tenant (az role and az assignment commands) because:

When you transfer billing ownership of your subscription to an account in another Azure AD tenant, you can move the subscription to the new account's tenant. If you do so, all users, groups, or service principals that had Azure role assignments to manage subscriptions and its resources lose their access. Only the user in the new account who accepts your transfer request will have access to manage the resources. The new owner must manually add these users to the subscription to provide access to the use who lost it. For more information, see Transfer an Azure subscription to a different Azure AD directory.

Finally, we will follow the instructions for transferring an Azure Subscription to a new Tenant. ( https://learn.microsoft.com/en-us/azure/role-based-access-control/transfer-subscription)

(Please note that this process takes a while to reflect the new resources in the new tenant. Usually much longer than the 1-2 hours they mention). If you do not see your resources in the Portal - try the CLI.

Transfer billing owenership of Azure Subscription to the other tenant (https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/billing-subscription-transfer)

Once billing ownership is transferred. Transfer the subscription to the new tenant.

If you have any custom policies that applied to the subscription - those will have to be recreated too.

If the response helped, do "Accept Answer" and up-vote it
Sushma Murali 0 Reputation points

2023-06-05T09:09:05.7133333+00:00

Hello,

Thankyou for looking into this and responding back!

Our requirement is not to move individual resources to another tenant but to move the entire subscription along with combination of above mentioned resources to another tenant. In that case, I would like to know what resources migrates without any impact and what needs to be re-created. If I can get some confirmation on that, it will be helpful.

When, I look at MS article: https://learn.microsoft.com/en-us/azure/governance/resource-graph/samples/samples-by-category#list-impacted-resources-when-transferring-an-azure-subscription , the resources it mentions as impacted are: Managed Identities, Key Vaults,Managed Clusters, Storage Accounts, Data Lake Storage Accounts and Databases. No where it clearly talks about the set of resources I pasted above and its impact during the subscription migration to another tenant.

Please help!

Thanks & Regards,

Sushma.
SadiqhAhmed-MSFT 48,256 Reputation points Microsoft Employee

2023-09-08T14:27:51.1766667+00:00

@Sushma Murali Apologies for the delayed response. The link I shared earlier has the details of resources that you can move. For the one's that cannot be moved, you can redeploy by exporting and importing the ARM templates, but you must move the data manually.

Hope this helps!
Vinay Kshirsagar 0 Reputation points

2025-01-07T08:55:33.4033333+00:00
@SadiqhAhmed-MSFT The original question asked by the concern person is to know if MS have any list prepared / available which clearly mentions which are the resources which will get migrated to different tenant along with azure subscription and which will be require to re-create.

Share via

What all resources gets migrated when migrating a subscription from one tenant to another tenant

Your answer