Link an Office 365 tenant to an Azure subscription

Link your separate Azure and Office 365 subscriptions so that you can access the Office 365 tenant from your Azure subscription. To link your subscriptions, sign in to Azure with the Azure service administrator account, add a directory, and add the Office 365 work or school accounts to the Azure Active Directory tenant.

Want to move your existing Azure subscription to your Office 365 work or school account? If you signed up for Azure using a personal Microsoft account, and want to use it or sign in with your Office 365 account, we strongly recommend transferring the subscription. See Transfer Azure subscription ownership to another account.

Want to sign up for Azure using Office 365? See Sign up for Azure with Office 365 account.

Before you begin

  • You must have the credentials of the Azure subscription service administrator. Co-administrator accounts can't do some of the steps in this article. To change your service administrator, see How to add or change Azure administrator roles.
  • You must have the credentials of a global administrator of the Office 365 tenant.
  • The email address of the service administrator must not be in the Office 365 tenant.
  • The email address of the service administrator must not match that of any global administrator of the Office 365 tenant.
  • If you use an email address that is both a Microsoft account and an organizational account, temporarily change the service administrator of your Azure subscription to use another Microsoft account. You can create a Microsoft account at the Microsoft account signup page.

To associate the Office 365 tenant to the Azure subscription, follow these steps:

Step 1: Add Office 365 tenant to your Azure subscription

  1. Sign in to the Azure classic portal with the service administrator credentials.

    Screenshot of Azure sign-in

  2. In the left pane, select ACTIVE DIRECTORY. You shouldn't see the Office 365 tenant. If you see it, skip to Step 2: Change the directory associated with the Azure subscription.

    Screenshot of Active Directory entry

  3. Select NEW > DIRECTORY > CUSTOM CREATE.

    Screenshot of Azure Active Directory custom create

  4. On the Add directory page, under DIRECTORY, select Use existing directory. Then select I am ready to be signed out now, and select Complete complete-icon.

    Screenshot of "Use existing directory"

  5. After you are signed out, sign in with the global administrator’s credentials of your Office 365 tenant.

    Screenshot of Office 365 global administrator sign-in

  6. Select Continue.

    Screenshot of verification

  7. Select Sign out now.

    Screenshot of sign-out

  8. Sign in to the Azure classic portal with the service administrator credentials.

    Screenshot of Azure sign-in

  9. You should see your Office 365 tenant in the dashboard.

    Screenshot of dashboard

Step 2: Change the directory associated with the Azure subscription

  1. Select Settings.

    Screenshot of Azure classic portal settings icon

  2. Select your Azure subscription, and then select EDIT DIRECTORY.

    Screenshot of Azure subscription edit directory

  3. Select Next Next icon.

    Screenshot of "Change the associated directory"

  4. Review the affected accounts. All co-administrators and Role-Based Access Control (RBAC) users with assigned access in the existing resource groups are removed. The warning you receive only mentions the removal of co-administrators.

    Screenshot that shows the co-administrator accounts to be removed.

    Screenshot that shows an example user account to be removed.

  5. Select Complete complete-icon.

Step 3: Add your Office 365 organizational accounts as admins to the Azure subscription

To add an admin to your Azure subscription, see Add or change Azure administrator roles that manage the subscription or services

Need help? Contact support.

If you still need help, contact support to get your issue resolved quickly.