You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/users-groups-roles/directory-delete-howto.md
+23-23Lines changed: 23 additions & 23 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
-
title: Delete an Azure AD directory - Azure Active Directory | Microsoft Docs
3
-
description: Explains how to prepare an Azure AD directory for deletion, including self-service directories
2
+
title: Delete an Azure AD organization (tenant) - Azure Active Directory | Microsoft Docs
3
+
description: Explains how to prepare an Azure AD organization (tenant) for deletion, including self-service organizations
4
4
services: active-directory
5
5
documentationcenter: ''
6
6
author: curtand
@@ -10,46 +10,46 @@ ms.service: active-directory
10
10
ms.workload: identity
11
11
ms.subservice: users-groups-roles
12
12
ms.topic: article
13
-
ms.date: 04/15/2019
13
+
ms.date: 05/21/2020
14
14
ms.author: curtand
15
15
16
16
ms.reviewer: addimitu
17
17
ms.custom: it-pro
18
18
19
19
ms.collection: M365-identity-device-management
20
20
---
21
-
# Delete a directory in Azure Active Directory
21
+
# Delete a tenant in Azure Active Directory
22
22
23
-
When an Azure AD directory is deleted, all resources that are contained in the directory are also deleted. Prepare your organization by minimizing its associated resources before you delete. Only an Azure Active Directory (Azure AD) global administrator can delete an Azure AD directory from the portal.
23
+
When an Azure AD organization (tenant) is deleted, all resources that are contained in the organization are also deleted. Prepare your organization by minimizing its associated resources before you delete. Only an Azure Active Directory (Azure AD) global administrator can delete an Azure AD organization from the portal.
24
24
25
-
## Prepare the directory
25
+
## Prepare the organization
26
26
27
-
You can't delete a directory in Azure AD until it passes several checks. These checks reduce risk that deleting an Azure AD directory negatively impacts user access, such as the ability to sign in to Office 365 or access resources in Azure. For example, if the directory associated with a subscription is unintentionally deleted, then users can't access the Azure resources for that subscription. The following conditions are checked:
27
+
You can't delete a organization in Azure AD until it passes several checks. These checks reduce risk that deleting an Azure AD organization negatively impacts user access, such as the ability to sign in to Office 365 or access resources in Azure. For example, if the organization associated with a subscription is unintentionally deleted, then users can't access the Azure resources for that subscription. The following conditions are checked:
28
28
29
-
* There can be no users in the directory except one global administrator who is to delete the directory. Any other users must be deleted before the directory can be deleted. If users are synchronized from on-premises, then sync must first be turned off, and the users must be deleted in the cloud directory using the Azure portal or Azure PowerShell cmdlets.
30
-
* There can be no applications in the directory. Any applications must be removed before the directory can be deleted.
31
-
* There can be no multi-factor authentication providers linked to the directory.
32
-
* There can be no subscriptions for any Microsoft Online Services such as Microsoft Azure, Office 365, or Azure AD Premium associated with the directory. For example, if a default directory was created for you in Azure, you cannot delete this directory if your Azure subscription still relies on this directory for authentication. Similarly, you can't delete a directory if another user has associated a subscription with it.
29
+
* There can be no users in the Azure AD organization (tenant) except one global administrator who is to delete the organization. Any other users must be deleted before the organization can be deleted. If users are synchronized from on-premises, then sync must first be turned off, and the users must be deleted in the cloud organization using the Azure portal or Azure PowerShell cmdlets.
30
+
* There can be no applications in the organization. Any applications must be removed before the organization can be deleted.
31
+
* There can be no multi-factor authentication providers linked to the organization.
32
+
* There can be no subscriptions for any Microsoft Online Services such as Microsoft Azure, Office 365, or Azure AD Premium associated with the organization. For example, if a default Azure AD organization was created for you in Azure, you cannot delete this organization if your Azure subscription still relies on this organization for authentication. Similarly, you can't delete a organization if another user has associated a subscription with it.
33
33
34
-
## Delete the directory
34
+
## Delete the organization
35
35
36
36
1. Sign in to the [Azure AD admin center](https://aad.portal.azure.com) with an account that is the Global Administrator for your organization.
37
37
38
38
2. Select **Azure Active Directory**.
39
39
40
-
3. Switch to the directory you want to delete.
40
+
3. Switch to the organization you want to delete.
41
41
42
42

43
43
44
-
4. Select **Delete directory**.
44
+
4. Select **Delete tenant**.
45
45
46
46

47
47
48
-
5. If your directory does not pass one or more checks, you're provided with a link to more information on how to pass. After you pass all checks, select **Delete** to complete the process.
48
+
5. If your organization does not pass one or more checks, you're provided with a link to more information on how to pass. After you pass all checks, select **Delete** to complete the process.
49
49
50
-
## If you can't delete the directory
50
+
## If you can't delete the organization
51
51
52
-
When you configured your Azure AD directory, you may have also activated license-based subscriptions for your organization like Azure AD Premium P2, Office 365 Business Premium, or Enterprise Mobility + Security E5. To avoid accidental data loss, you can't delete a directory until the subscriptions are fully deleted. The subscriptions must be in a **Deprovisioned** state to allow directory deletion. An **Expired** or **Canceled** subscription moves to the **Disabled** state, and the final stage is the **Deprovisioned** state.
52
+
When you configured your Azure AD organization, you may have also activated license-based subscriptions for your organization like Azure AD Premium P2, Office 365 Business Premium, or Enterprise Mobility + Security E5. To avoid accidental data loss, you can't delete a organization until the subscriptions are fully deleted. The subscriptions must be in a **Deprovisioned** state to allow organization deletion. An **Expired** or **Canceled** subscription moves to the **Disabled** state, and the final stage is the **Deprovisioned** state.
53
53
54
54
For what to expect when a trial Office 365 subscription expires (not including paid Partner/CSP, Enterprise Agreement, or Volume Licensing), see the following table. For more information on Office 365 data retention and subscription lifecycle, see [What happens to my data and access when my Office 365 for business subscription ends?](https://support.office.com/article/what-happens-to-my-data-and-access-when-my-office-365-for-business-subscription-ends-4436582f-211a-45ec-b72e-33647f97d8a3).
55
55
@@ -64,7 +64,7 @@ Deprovisioned (30 days after Disabled) | Data deleted (automatically deleted if
64
64
65
65
You can put a subscription into the **Deprovisioned** state to be deleted in three days using the Microsoft 365 admin center.
66
66
67
-
1. Sign in to the [Microsoft 365 admin center](https://admin.microsoft.com) with an account that is a global administrator in your organization. If you are trying to delete the “Contoso” directory that has the initial default domain contoso.onmicrosoft.com, sign in with a UPN such as [email protected].
67
+
1. Sign in to the [Microsoft 365 admin center](https://admin.microsoft.com) with an account that is a global administrator in your organization. If you are trying to delete the “Contoso” organization that has the initial default domain contoso.onmicrosoft.com, sign in with a UPN such as [email protected].
68
68
69
69
2. Preview the new Microsoft 365 admin center by making sure the **Try the new admin center** toggle is enabled.
70
70
@@ -88,18 +88,18 @@ You can put a subscription into the **Deprovisioned** state to be deleted in thr
88
88
89
89
7. Now the subscription state has changed, and the subscription is marked for deletion. The subscription enters the **Deprovisioned** state 72 hours later.
90
90
91
-
8. Once you have deleted a subscription in your directory and 72 hours have elapsed, you can sign back into the Azure AD admin center again and there should be no required action and no subscriptions blocking your directory deletion. You should be able to successfully delete your Azure AD directory.
91
+
8. Once you have deleted a subscription in your organization and 72 hours have elapsed, you can sign back into the Azure AD admin center again and there should be no required action and no subscriptions blocking your organization deletion. You should be able to successfully delete your Azure AD organization.
92
92
93
93

94
94
95
95
## I have a trial subscription that blocks deletion
96
96
97
-
There are [self-service sign-up products](https://docs.microsoft.com/office365/admin/misc/self-service-sign-up?view=o365-worldwide) like Microsoft Power BI, Rights Management Services, Microsoft Power Apps, or Dynamics 365, individual users can sign up via Office 365, which also creates a guest user for authentication in your Azure AD directory. These self-service products block directory deletions until they are fully deleted from the directory, to avoid data loss. They can be deleted only by the Azure AD admin whether the user signed up individually or was assigned the product.
97
+
There are [self-service sign-up products](https://docs.microsoft.com/office365/admin/misc/self-service-sign-up?view=o365-worldwide) like Microsoft Power BI, Rights Management Services, Microsoft Power Apps, or Dynamics 365, individual users can sign up via Office 365, which also creates a guest user for authentication in your Azure AD organization. These self-service products block directory deletions until the products are fully deleted from the organization, to avoid data loss. They can be deleted only by the Azure AD admin whether the user signed up individually or was assigned the product.
98
98
99
99
There are two types of self-service sign-up products in how they are assigned:
100
100
101
101
* Org-level assignment: An Azure AD admin assigns the product to the entire organization and a user can be actively using the service with this org-level assignment even if they are not licensed individually.
102
-
* User level assignment: An individual user during self-service sign-up essentially assigns the product to themselves without an admin. Once the organization becomes managed by an admin (see [Administrator takeover of an unmanaged directory](domains-admin-takeover.md), then the admin can directly assign the product to users without self-service sign-up.
102
+
* User level assignment: An individual user during self-service sign-up essentially assigns the product to themselves without an admin. Once the organization becomes managed by an admin (see [Administrator takeover of an unmanaged organization](domains-admin-takeover.md), then the admin can directly assign the product to users without self-service sign-up.
103
103
104
104
When you begin the deletion of the self-service sign-up product, the action permanently deletes the data and removes all user access to the service. Any user that was assigned the offer individually or on the organization level is then blocked from signing in or accessing any existing data. If you want to prevent data loss with the self-service sign-up product like [Microsoft Power BI dashboards](https://docs.microsoft.com/power-bi/service-export-to-pbix) or [Rights Management Services policy configuration](https://docs.microsoft.com/azure/information-protection/configure-policy#how-to-configure-the-azure-information-protection-policy), ensure that the data is backed up and saved elsewhere.
You can put a self-service sign-up product like Microsoft Power BI or Azure Rights Management Services into a **Delete** state to be immediately deleted in the Azure AD portal.
118
118
119
-
1. Sign in to the [Azure AD admin center](https://aad.portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Overview) with an account that is a Global administrator in the organization. If you are trying to delete the “Contoso” directory that has the initial default domain contoso.onmicrosoft.com, sign on with a UPN such as [email protected].
119
+
1. Sign in to the [Azure AD admin center](https://aad.portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Overview) with an account that is a Global administrator in the organization. If you are trying to delete the “Contoso” organization that has the initial default domain contoso.onmicrosoft.com, sign on with a UPN such as [email protected].
120
120
121
121
2. Select **Licenses**, and then select **Self-service sign-up products**. You can see all the self-service sign-up products separately from the seat-based subscriptions. Choose the product you want to permanently delete. Here's an example in Microsoft Power BI:
122
122
@@ -134,7 +134,7 @@ You can put a self-service sign-up product like Microsoft Power BI or Azure Righ
134
134
135
135

136
136
137
-
6. Once you have deleted all the products, you can sign back into the Azure AD admin center again and there should be no required action and no products blocking your directory deletion. You should be able to successfully delete your Azure AD directory.
137
+
6. Once you have deleted all the products, you can sign back into the Azure AD admin center again and there should be no required action and no products blocking your organization deletion. You should be able to successfully delete your Azure AD organization.
138
138
139
139

0 commit comments