Peter D
Peter D

Reputation: 1

How to connect with PowerShell using external user creds to another tenant in Azure?

I have "external user" from TenantA AD added to TenantB in Azure and added as "owner" to one of B subscriptions.

How can I connect with PowerShell using that external user to TenantB subscription?

Login-AzureRmAccount/Add-AzureRmAccount while using external users' UPN in -Credential and specifying tenantId/subscriptionId of TenantB gives me error:

add-azurermaccount : The provided account <...> does not have access to subscription ID "<...>". Please try logging in with different credentials or a different subscription ID.**

Looking at Get-MsolUser output of TenantB, I can see external user from tenantA in the following form:

PS C:\> get-msoluser

UserPrincipalName                                                          DisplayName     isLicensed
-----------------                                                          -----------     ----------
<username>_tenantA.onmicrosoft.com#EXT#@tenantB.onmicrosoft.com  <..>   False

Upvotes: 0

Views: 516

Answers (1)

Martin Brandl
Martin Brandl

Reputation: 58931

I would start with clearing the cached credentials using:

Get-AzureAccount | ForEach-Object { Remove-AzureAccount $_.ID -Force }

Then use Login-AzureRmAccount and enter the credentials for TenantA. You should be able to switch the subscription using.

Select-AzureRmSubscription -SubscriptionName

Upvotes: 0

Related Questions