Service | Customer Service, Contact Center, Fie...

Azure AD tenant change impact on existing D365 User access

(0) Share

Report

Posted on by chmoules

We are in AzureTenantA and all Users have licensed and granted Roles in a given D365 CRM ORG.

We are planning to move to a new AzureTenantB.

Doubt is, will the existing D365 access to existing Users have any impact due to Tenant change since D365 org being accessed is same and not sure whether any significance to the Azure User Object Id of existing User wrt D365 access or no impact. What factors we need to consider for existing Users when Tenant changes.

Please clarify.

I have the same question (0)

All responses (5)

Answers (0)

Suggested answer

Community Member on at

Like (0)

Report

Hi,

If you migrate a user from Tenant A to Tenant B, any permissions granted to the user in the original tenant no longer exist, and you need to re-grant in Tenant B.

If this helped you, I'd appreciate it if you'd mark this as a Verified Answer, which may in turn help others as well.

Best Regards,

Frank Gong

Was this reply helpful? Yes No
PerezAguiar Microsoft Employee on at

Like (0)

Report

Hey!

The main question is: Are you also moving your D365 environments from one tenant to another? As Frank stated, If you have Users & D365 environments on TenantA and you move users to TenantB (but leave the environments on TenantA), there's no actual relationship between TenantA and tenantB and the users will not be able to login (or at least not with the same username). A different account might still exist on tenantA (usually, with a domain like 'yourdomain.onmicrosoft.com'). Also, be aware that licenses will be on tenantA.

regards

Was this reply helpful? Yes No
chmoules on at

Like (0)

Report

That means, did you meant the User granted D365 License being in Tenant-A, need to be re-assigned new D365 License after in Tenant-B.

Does the Azure AD User Objects, get synced and creating with a New ObjectId in New Tenant by Azure Global Admin or how this AD Users (of members) would get created in New Tenant?

Was this reply helpful? Yes No
PerezAguiar Microsoft Employee on at

Like (0)

Report

Hi!

That's the reason behind my question of: is the environment also being migrated? If environment is staying on TenantA, then only users from tenantA will be able to login (but they will have different UPN, more likely with different domain). If environments were also migrated to another domain, then they will need a new license as the OBjectID will be different.

Was this reply helpful? Yes No
AriaConsulting 2 on at

Like (0)

Report
chmoules,

There are multiple factors you need to provide information on for us to be able to better assist you. A couple have already been asked such as are you migrating the D365 tenant along with Azure AD. But also:

Is your AAD (Azure AD) a pure cloud deployment or a hybrid?

Is your AAD a std. subscription, P1, P2, or B2B or B2C as well?

How are you migrating the AAD?

Are you also intending to migrate your M365 tenant?

Are you changing other aspects outside of the domain name and AAD tenancy? Such as country? Currency? AAD primary Azure DC region? Are you moving to a multi-geo setup?

Have you contacted an MS partner to engage MS to do the move yet?

If you can provide the additional information we might be able to better help.

Was this reply helpful? Yes No