Skip to content

Commit b13f707

Browse files
Update keyvault-movesubscription.md
updating acrolynx
1 parent 5098f37 commit b13f707

File tree

1 file changed

+6
-7
lines changed

1 file changed

+6
-7
lines changed

articles/key-vault/general/keyvault-movesubscription.md

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -13,26 +13,25 @@ ms.date: 04/29/2020
1313
ms.author: sudbalas
1414
Customer intent: As a key vault administrator, I want to move my vault to another subscription.
1515
---
16+
[!INCLUDE [updated-for-az](../../../includes/updated-for-az.md)]
1617

1718
# Moving an Azure Key Vault to another subscription
1819

1920
## Overview
2021

21-
[!INCLUDE [updated-for-az](../../../includes/updated-for-az.md)]
22-
2322
**Moving a key vault to another subscription will cause a breaking change to your environment.**
2423

25-
Please make sure you understand the impact of this change and follow the guidance in this article carefully before deciding to move key vault to a new subscription.
24+
Make sure you understand the impact of this change and follow the guidance in this article carefully before deciding to move key vault to a new subscription.
2625

27-
When you create a key vault it is automatically tied to the default Azure Active Directory tenant ID for the subscription in which it is created. All access policy entries are also tied to this tenant ID. If you move your Azure subscription from tenant A to tenant B, your existing key vaults will be inaccessible by the service principals (users and applications) in tenant B. To fix this issue, you need to:
26+
When you create a key vault, it is automatically tied to the default Azure Active Directory tenant ID for the subscription in which it is created. All access policy entries are also tied to this tenant ID. If you move your Azure subscription from tenant A to tenant B, your existing key vaults will be inaccessible by the service principals (users and applications) in tenant B. To fix this issue, you need to:
2827

2928
* Change the tenant ID associated with all existing key vaults in the subscription to tenant B.
3029
* Remove all existing access policy entries.
3130
* Add new access policy entries associated with tenant B.
3231

3332
## Limitations
3433

35-
Some service principals (users and applications) are bound to a specific tenant. If you move your key vault to a subscription in another tenant, there is a chance that you will not be able to restore access to a specific service principal. You should check to make sure that all essential service principals exist in the tenant where you are moving your key vault.
34+
Some service principals (users and applications) are bound to a specific tenant. If you move your key vault to a subscription in another tenant, there is a chance that you will not be able to restore access to a specific service principal. Check to make sure that all essential service principals exist in the tenant where you are moving your key vault.
3635

3736
## Design Considerations
3837

@@ -54,7 +53,7 @@ Make sure that you go to the Azure Policy page on the Azure portal and look at t
5453

5554
## Procedure
5655

57-
### Initial Steps
56+
### Initial Steps (Moving Key Vault)
5857

5958
1. Log in to the Azure portal
6059
2. Navigate to your key vault
@@ -68,7 +67,7 @@ Make sure that you go to the Azure Policy page on the Azure portal and look at t
6867

6968
### Additional Steps (Post Move)
7069

71-
Now that you have moved your key vault to the new subscription, you need to update the tenant id and remove old access policies. Here are tutorials for these steps in Powershell and Azure CLI.
70+
Now that you have moved your key vault to the new subscription, you need to update the tenant id and remove old access policies. Here are tutorials for these steps in PowerShell and Azure CLI.
7271

7372
```azurepowershell
7473
Select-AzSubscription -SubscriptionId <your-subscriptionId> # Select your Azure Subscription

0 commit comments

Comments
 (0)