Associate an Office 365 tenant to an Azure subscription

Link your separate Azure and Office 365 subscriptions so that you can access the Office 365 tenant from your Azure subscription. To link your subscriptions, sign in to Azure with the Azure service administrator account, add a directory, and add the Office 365 organizational accounts to the Azure Active Directory tenant.

If you want an Office 365 subscription for users in your Azure Active Directory instance or you have an Office 365 account but not an Azure account, see Sign up for Azure with Office 365 account.

Before you begin

  • You must have the credentials of the Azure subscription service administrator. Co-administrator accounts can't do some of the steps in this article. To change your service administrator, see How to add or change Azure administrator roles.
  • You must have the credentials of a global administrator of the Office 365 tenant.
  • The email address of the service administrator must not be in the Office 365 tenant.
  • The email address of the service administrator must not match that of any global administrator of the Office 365 tenant.
  • If you use an email address that is both a Microsoft account and an organizational account, temporarily change the service administrator of your Azure subscription to use another Microsoft account. You can create a Microsoft account at the Microsoft account signup page.

To associate the Office 365 tenant to the Azure subscription, follow these steps:

Step 1: Add Office 365 tenant to your Azure subscription

  1. Sign in to the Azure classic portal with the service administrator credentials.

    Screenshot of Azure sign-in

  2. In the left pane, select ACTIVE DIRECTORY. You shouldn't see the Office 365 tenant. If you see it, skip to Step 2: Change the directory associated with the Azure subscription.

    Screenshot of Active Directory entry

  3. Select NEW > DIRECTORY > CUSTOM CREATE.

    Screenshot of Azure Active Directory custom create

  4. On the Add directory page, under DIRECTORY, select Use existing directory. Then select I am ready to be signed out now, and select Complete complete-icon.

    Screenshot of "Use existing directory"

  5. After you are signed out, sign in with the global administrator’s credentials of your Office 365 tenant.

    Screenshot of Office 365 global administrator sign-in

  6. Select Continue.

    Screenshot of verification

  7. Select Sign out now.

    Screenshot of sign-out

  8. Sign in to the Azure classic portal with the service administrator credentials.

    Screenshot of Azure sign-in

  9. You should see your Office 365 tenant in the dashboard.

    Screenshot of dashboard

Step 2: Change the directory associated with the Azure subscription

  1. Select Settings.

    Screenshot of Azure classic portal settings icon

  2. Select your Azure subscription, and then select EDIT DIRECTORY.

    Screenshot of Azure subscription edit directory

  3. Select Next Next icon.

    Screenshot of "Change the associated directory"

  4. Review the affected accounts. All co-administrators and Role-Based Access Control (RBAC) users with assigned access in the existing resource groups are removed. The warning you receive only mentions the removal of co-administrators.

    Screenshot that shows the co-administrator accounts to be removed.

    Screenshot that shows an example user account to be removed.

  5. Select Complete complete-icon.

Step 3: Add your Office 365 organizational accounts as co-administrators to the Azure Active Directory tenant

  1. Select the ADMINISTRATORS tab, and then select ADD.

    Screenshot of Azure classic portal settings administrators tab

  2. Enter an organizational account of your Office 365 tenant, select the Azure subscription, and then select Complete complete-icon.

    Screenshot of Azure add co-administrator dialog box

  3. Go back to the ADMINISTRATORS tab. You should see the organizational account displayed as co-administrator.

    Screenshot of administrators tab

  4. Test access to Azure with the co-administrator account.

    a. Sign out of the Azure classic portal.

    b. Open the Azure portal.

    c. Enter the credentials of the co-administrator, and then select Sign in.

    Screenshot of Azure sign-in page

Need help? Contact support.

If you still need help, contact support to get your issue resolved quickly.