Skip to content

Commit b0710a7

Browse files
authored
Merge pull request #116184 from curtand/delete0520
[Azure AD org options] delete an organization updates
2 parents db00ef8 + da7c506 commit b0710a7

File tree

1 file changed

+23
-23
lines changed

1 file changed

+23
-23
lines changed

articles/active-directory/users-groups-roles/directory-delete-howto.md

Lines changed: 23 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Delete an Azure AD directory - Azure Active Directory | Microsoft Docs
3-
description: Explains how to prepare an Azure AD directory for deletion, including self-service directories
2+
title: Delete an Azure AD organization (tenant) - Azure Active Directory | Microsoft Docs
3+
description: Explains how to prepare an Azure AD organization (tenant) for deletion, including self-service organizations
44
services: active-directory
55
documentationcenter: ''
66
author: curtand
@@ -10,46 +10,46 @@ ms.service: active-directory
1010
ms.workload: identity
1111
ms.subservice: users-groups-roles
1212
ms.topic: article
13-
ms.date: 04/15/2019
13+
ms.date: 05/21/2020
1414
ms.author: curtand
1515

1616
ms.reviewer: addimitu
1717
ms.custom: it-pro
1818

1919
ms.collection: M365-identity-device-management
2020
---
21-
# Delete a directory in Azure Active Directory
21+
# Delete a tenant in Azure Active Directory
2222

23-
When an Azure AD directory is deleted, all resources that are contained in the directory are also deleted. Prepare your organization by minimizing its associated resources before you delete. Only an Azure Active Directory (Azure AD) global administrator can delete an Azure AD directory from the portal.
23+
When an Azure AD organization (tenant) is deleted, all resources that are contained in the organization are also deleted. Prepare your organization by minimizing its associated resources before you delete. Only an Azure Active Directory (Azure AD) global administrator can delete an Azure AD organization from the portal.
2424

25-
## Prepare the directory
25+
## Prepare the organization
2626

27-
You can't delete a directory in Azure AD until it passes several checks. These checks reduce risk that deleting an Azure AD directory negatively impacts user access, such as the ability to sign in to Office 365 or access resources in Azure. For example, if the directory associated with a subscription is unintentionally deleted, then users can't access the Azure resources for that subscription. The following conditions are checked:
27+
You can't delete a organization in Azure AD until it passes several checks. These checks reduce risk that deleting an Azure AD organization negatively impacts user access, such as the ability to sign in to Office 365 or access resources in Azure. For example, if the organization associated with a subscription is unintentionally deleted, then users can't access the Azure resources for that subscription. The following conditions are checked:
2828

29-
* There can be no users in the directory except one global administrator who is to delete the directory. Any other users must be deleted before the directory can be deleted. If users are synchronized from on-premises, then sync must first be turned off, and the users must be deleted in the cloud directory using the Azure portal or Azure PowerShell cmdlets.
30-
* There can be no applications in the directory. Any applications must be removed before the directory can be deleted.
31-
* There can be no multi-factor authentication providers linked to the directory.
32-
* There can be no subscriptions for any Microsoft Online Services such as Microsoft Azure, Office 365, or Azure AD Premium associated with the directory. For example, if a default directory was created for you in Azure, you cannot delete this directory if your Azure subscription still relies on this directory for authentication. Similarly, you can't delete a directory if another user has associated a subscription with it.
29+
* There can be no users in the Azure AD organization (tenant) except one global administrator who is to delete the organization. Any other users must be deleted before the organization can be deleted. If users are synchronized from on-premises, then sync must first be turned off, and the users must be deleted in the cloud organization using the Azure portal or Azure PowerShell cmdlets.
30+
* There can be no applications in the organization. Any applications must be removed before the organization can be deleted.
31+
* There can be no multi-factor authentication providers linked to the organization.
32+
* There can be no subscriptions for any Microsoft Online Services such as Microsoft Azure, Office 365, or Azure AD Premium associated with the organization. For example, if a default Azure AD organization was created for you in Azure, you cannot delete this organization if your Azure subscription still relies on this organization for authentication. Similarly, you can't delete a organization if another user has associated a subscription with it.
3333

34-
## Delete the directory
34+
## Delete the organization
3535

3636
1. Sign in to the [Azure AD admin center](https://aad.portal.azure.com) with an account that is the Global Administrator for your organization.
3737

3838
2. Select **Azure Active Directory**.
3939

40-
3. Switch to the directory you want to delete.
40+
3. Switch to the organization you want to delete.
4141

4242
![Confirm organization before deleting](./media/directory-delete-howto/delete-directory-command.png)
4343

44-
4. Select **Delete directory**.
44+
4. Select **Delete tenant**.
4545

4646
![select the command to delete the organization](./media/directory-delete-howto/delete-directory-list.png)
4747

48-
5. If your directory does not pass one or more checks, you're provided with a link to more information on how to pass. After you pass all checks, select **Delete** to complete the process.
48+
5. If your organization does not pass one or more checks, you're provided with a link to more information on how to pass. After you pass all checks, select **Delete** to complete the process.
4949

50-
## If you can't delete the directory
50+
## If you can't delete the organization
5151

52-
When you configured your Azure AD directory, you may have also activated license-based subscriptions for your organization like Azure AD Premium P2, Office 365 Business Premium, or Enterprise Mobility + Security E5. To avoid accidental data loss, you can't delete a directory until the subscriptions are fully deleted. The subscriptions must be in a **Deprovisioned** state to allow directory deletion. An **Expired** or **Canceled** subscription moves to the **Disabled** state, and the final stage is the **Deprovisioned** state.
52+
When you configured your Azure AD organization, you may have also activated license-based subscriptions for your organization like Azure AD Premium P2, Office 365 Business Premium, or Enterprise Mobility + Security E5. To avoid accidental data loss, you can't delete a organization until the subscriptions are fully deleted. The subscriptions must be in a **Deprovisioned** state to allow organization deletion. An **Expired** or **Canceled** subscription moves to the **Disabled** state, and the final stage is the **Deprovisioned** state.
5353

5454
For what to expect when a trial Office 365 subscription expires (not including paid Partner/CSP, Enterprise Agreement, or Volume Licensing), see the following table. For more information on Office 365 data retention and subscription lifecycle, see [What happens to my data and access when my Office 365 for business subscription ends?](https://support.office.com/article/what-happens-to-my-data-and-access-when-my-office-365-for-business-subscription-ends-4436582f-211a-45ec-b72e-33647f97d8a3).
5555

@@ -64,7 +64,7 @@ Deprovisioned (30 days after Disabled) | Data deleted (automatically deleted if
6464

6565
You can put a subscription into the **Deprovisioned** state to be deleted in three days using the Microsoft 365 admin center.
6666

67-
1. Sign in to the [Microsoft 365 admin center](https://admin.microsoft.com) with an account that is a global administrator in your organization. If you are trying to delete the “Contoso” directory that has the initial default domain contoso.onmicrosoft.com, sign in with a UPN such as [email protected].
67+
1. Sign in to the [Microsoft 365 admin center](https://admin.microsoft.com) with an account that is a global administrator in your organization. If you are trying to delete the “Contoso” organization that has the initial default domain contoso.onmicrosoft.com, sign in with a UPN such as [email protected].
6868

6969
2. Preview the new Microsoft 365 admin center by making sure the **Try the new admin center** toggle is enabled.
7070

@@ -88,18 +88,18 @@ You can put a subscription into the **Deprovisioned** state to be deleted in thr
8888

8989
7. Now the subscription state has changed, and the subscription is marked for deletion. The subscription enters the **Deprovisioned** state 72 hours later.
9090

91-
8. Once you have deleted a subscription in your directory and 72 hours have elapsed, you can sign back into the Azure AD admin center again and there should be no required action and no subscriptions blocking your directory deletion. You should be able to successfully delete your Azure AD directory.
91+
8. Once you have deleted a subscription in your organization and 72 hours have elapsed, you can sign back into the Azure AD admin center again and there should be no required action and no subscriptions blocking your organization deletion. You should be able to successfully delete your Azure AD organization.
9292

9393
![pass subscription check at deletion screen](./media/directory-delete-howto/delete-checks-passed.png)
9494

9595
## I have a trial subscription that blocks deletion
9696

97-
There are [self-service sign-up products](https://docs.microsoft.com/office365/admin/misc/self-service-sign-up?view=o365-worldwide) like Microsoft Power BI, Rights Management Services, Microsoft Power Apps, or Dynamics 365, individual users can sign up via Office 365, which also creates a guest user for authentication in your Azure AD directory. These self-service products block directory deletions until they are fully deleted from the directory, to avoid data loss. They can be deleted only by the Azure AD admin whether the user signed up individually or was assigned the product.
97+
There are [self-service sign-up products](https://docs.microsoft.com/office365/admin/misc/self-service-sign-up?view=o365-worldwide) like Microsoft Power BI, Rights Management Services, Microsoft Power Apps, or Dynamics 365, individual users can sign up via Office 365, which also creates a guest user for authentication in your Azure AD organization. These self-service products block directory deletions until the products are fully deleted from the organization, to avoid data loss. They can be deleted only by the Azure AD admin whether the user signed up individually or was assigned the product.
9898

9999
There are two types of self-service sign-up products in how they are assigned:
100100

101101
* Org-level assignment: An Azure AD admin assigns the product to the entire organization and a user can be actively using the service with this org-level assignment even if they are not licensed individually.
102-
* User level assignment: An individual user during self-service sign-up essentially assigns the product to themselves without an admin. Once the organization becomes managed by an admin (see [Administrator takeover of an unmanaged directory](domains-admin-takeover.md), then the admin can directly assign the product to users without self-service sign-up.
102+
* User level assignment: An individual user during self-service sign-up essentially assigns the product to themselves without an admin. Once the organization becomes managed by an admin (see [Administrator takeover of an unmanaged organization](domains-admin-takeover.md), then the admin can directly assign the product to users without self-service sign-up.
103103

104104
When you begin the deletion of the self-service sign-up product, the action permanently deletes the data and removes all user access to the service. Any user that was assigned the offer individually or on the organization level is then blocked from signing in or accessing any existing data. If you want to prevent data loss with the self-service sign-up product like [Microsoft Power BI dashboards](https://docs.microsoft.com/power-bi/service-export-to-pbix) or [Rights Management Services policy configuration](https://docs.microsoft.com/azure/information-protection/configure-policy#how-to-configure-the-azure-information-protection-policy), ensure that the data is backed up and saved elsewhere.
105105

@@ -116,7 +116,7 @@ Deleted | Data deleted | Users can’t access self-service sign-up product, file
116116

117117
You can put a self-service sign-up product like Microsoft Power BI or Azure Rights Management Services into a **Delete** state to be immediately deleted in the Azure AD portal.
118118

119-
1. Sign in to the [Azure AD admin center](https://aad.portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Overview) with an account that is a Global administrator in the organization. If you are trying to delete the “Contoso” directory that has the initial default domain contoso.onmicrosoft.com, sign on with a UPN such as [email protected].
119+
1. Sign in to the [Azure AD admin center](https://aad.portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Overview) with an account that is a Global administrator in the organization. If you are trying to delete the “Contoso” organization that has the initial default domain contoso.onmicrosoft.com, sign on with a UPN such as [email protected].
120120

121121
2. Select **Licenses**, and then select **Self-service sign-up products**. You can see all the self-service sign-up products separately from the seat-based subscriptions. Choose the product you want to permanently delete. Here's an example in Microsoft Power BI:
122122

@@ -134,7 +134,7 @@ You can put a self-service sign-up product like Microsoft Power BI or Azure Righ
134134

135135
![the username is mistyped or not found](./media/directory-delete-howto/product-deleted.png)
136136

137-
6. Once you have deleted all the products, you can sign back into the Azure AD admin center again and there should be no required action and no products blocking your directory deletion. You should be able to successfully delete your Azure AD directory.
137+
6. Once you have deleted all the products, you can sign back into the Azure AD admin center again and there should be no required action and no products blocking your organization deletion. You should be able to successfully delete your Azure AD organization.
138138

139139
![the username is mistyped or not found](./media/directory-delete-howto/delete-organization.png)
140140

0 commit comments

Comments
 (0)