Skip to content

Commit e68afaf

Browse files
Merge pull request #225549 from tfitzmac/0130tenant
noted cross tenant move is not supported
2 parents 067f7fe + b7f2901 commit e68afaf

File tree

3 files changed

+28
-23
lines changed

3 files changed

+28
-23
lines changed

articles/azure-resource-manager/management/move-resource-group-and-subscription.md

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Move resources to a new subscription or resource group
33
description: Use Azure Resource Manager to move resources to a new resource group or subscription.
44
ms.topic: conceptual
5-
ms.date: 11/04/2022
5+
ms.date: 01/30/2023
66
ms.custom: devx-track-azurecli, devx-track-azurepowershell
77
---
88

@@ -26,23 +26,6 @@ If you use the resource ID anywhere, you'll need to change that value. For examp
2626

2727
There are some important steps to do before moving a resource. By verifying these conditions, you can avoid errors.
2828

29-
1. The resources you want to move must support the move operation. For a list of which resources support move, see [Move operation support for resources](move-support-resources.md).
30-
31-
1. Some services have specific limitations or requirements when moving resources. If you're moving any of the following services, check that guidance before moving.
32-
33-
* If you're using Azure Stack Hub, you can't move resources between groups.
34-
* [App Services move guidance](./move-limitations/app-service-move-limitations.md)
35-
* [Azure DevOps Services move guidance](/azure/devops/organizations/billing/change-azure-subscription?toc=/azure/azure-resource-manager/toc.json)
36-
* [Classic deployment model move guidance](./move-limitations/classic-model-move-limitations.md) - Classic Compute, Classic Storage, Classic Virtual Networks, and Cloud Services
37-
* [Networking move guidance](./move-limitations/networking-move-limitations.md)
38-
* [Recovery Services move guidance](../../backup/backup-azure-move-recovery-services-vault.md?toc=/azure/azure-resource-manager/toc.json)
39-
* [Virtual Machines move guidance](./move-limitations/virtual-machines-move-limitations.md)
40-
* To move an Azure subscription to a new management group, see [Move subscriptions](../../governance/management-groups/manage.md#move-subscriptions).
41-
42-
1. If you move a resource that has an Azure role assigned directly to the resource (or a child resource), the role assignment isn't moved and becomes orphaned. After the move, you must re-create the role assignment. Eventually, the orphaned role assignment is automatically removed, but we recommend removing the role assignment before the move.
43-
44-
For information about how to manage role assignments, see [List Azure role assignments](../../role-based-access-control/role-assignments-list-portal.md#list-role-assignments-at-a-scope) and [Assign Azure roles](../../role-based-access-control/role-assignments-portal.md).
45-
4629
1. The source and destination subscriptions must be active. If you have trouble enabling an account that has been disabled, [create an Azure support request](../../azure-portal/supportability/how-to-create-azure-support-request.md). Select **Subscription Management** for the issue type.
4730

4831
1. The source and destination subscriptions must exist within the same [Azure Active Directory tenant](../../active-directory/develop/quickstart-create-new-tenant.md). To check that both subscriptions have the same tenant ID, use Azure PowerShell or Azure CLI.
@@ -68,6 +51,19 @@ There are some important steps to do before moving a resource. By verifying thes
6851

6952
1. If you're attempting to move resources to or from a Cloud Solution Provider (CSP) partner, see [Transfer Azure subscriptions between subscribers and CSPs](../../cost-management-billing/manage/transfer-subscriptions-subscribers-csp.md).
7053

54+
1. The resources you want to move must support the move operation. For a list of which resources support move, see [Move operation support for resources](move-support-resources.md).
55+
56+
1. Some services have specific limitations or requirements when moving resources. If you're moving any of the following services, check that guidance before moving.
57+
58+
* If you're using Azure Stack Hub, you can't move resources between groups.
59+
* [App Services move guidance](./move-limitations/app-service-move-limitations.md)
60+
* [Azure DevOps Services move guidance](/azure/devops/organizations/billing/change-azure-subscription?toc=/azure/azure-resource-manager/toc.json)
61+
* [Classic deployment model move guidance](./move-limitations/classic-model-move-limitations.md) - Classic Compute, Classic Storage, Classic Virtual Networks, and Cloud Services
62+
* [Networking move guidance](./move-limitations/networking-move-limitations.md)
63+
* [Recovery Services move guidance](../../backup/backup-azure-move-recovery-services-vault.md?toc=/azure/azure-resource-manager/toc.json)
64+
* [Virtual Machines move guidance](./move-limitations/virtual-machines-move-limitations.md)
65+
* To move an Azure subscription to a new management group, see [Move subscriptions](../../governance/management-groups/manage.md#move-subscriptions).
66+
7167
1. The destination subscription must be registered for the resource provider of the resource being moved. If not, you receive an error stating that the **subscription is not registered for a resource type**. You might see this error when moving a resource to a new subscription, but that subscription has never been used with that resource type.
7268

7369
For PowerShell, use the following commands to get the registration status:
@@ -96,12 +92,16 @@ There are some important steps to do before moving a resource. By verifying thes
9692
az provider register --namespace Microsoft.Batch
9793
```
9894

95+
1. Before moving the resources, check the subscription quotas for the subscription you're moving the resources to. If moving the resources means the subscription will exceed its limits, you need to review whether you can request an increase in the quota. For a list of limits and how to request an increase, see [Azure subscription and service limits, quotas, and constraints](../../azure-resource-manager/management/azure-subscription-service-limits.md).
96+
9997
1. The account moving the resources must have at least the following permissions:
10098

10199
* **Microsoft.Resources/subscriptions/resourceGroups/moveResources/action** on the source resource group.
102100
* **Microsoft.Resources/subscriptions/resourceGroups/write** on the destination resource group.
103101

104-
1. Before moving the resources, check the subscription quotas for the subscription you're moving the resources to. If moving the resources means the subscription will exceed its limits, you need to review whether you can request an increase in the quota. For a list of limits and how to request an increase, see [Azure subscription and service limits, quotas, and constraints](../../azure-resource-manager/management/azure-subscription-service-limits.md).
102+
1. If you move a resource that has an Azure role assigned directly to the resource (or a child resource), the role assignment isn't moved and becomes orphaned. After the move, you must re-create the role assignment. Eventually, the orphaned role assignment is automatically removed, but we recommend removing the role assignment before the move.
103+
104+
For information about how to manage role assignments, see [List Azure role assignments](../../role-based-access-control/role-assignments-list-portal.md#list-role-assignments-at-a-scope) and [Assign Azure roles](../../role-based-access-control/role-assignments-portal.md).
105105

106106
1. **For a move across subscriptions, the resource and its dependent resources must be located in the same resource group and they must be moved together.** For example, a VM with managed disks would require the VM and the managed disks to be moved together, along with other dependent resources.
107107

articles/azure-resource-manager/management/move-resources-overview.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Move Azure resources across resource groups, subscriptions, or regions.
33
description: Overview of Azure resource types that can be moved across resource groups, subscriptions, or regions.
44
ms.topic: conceptual
5-
ms.date: 04/16/2021
5+
ms.date: 01/30/2023
66
---
77

88
# Move Azure resources across resource groups, subscriptions, or regions
@@ -13,6 +13,11 @@ Azure resources can be moved to a new resource group or subscription, or across
1313

1414
You can move Azure resources to either another Azure subscription or another resource group under the same subscription. You can use the Azure portal, Azure PowerShell, Azure CLI, or the REST API to move resources. To learn more, see [Move resources to a new resource group or subscription](move-resource-group-and-subscription.md).
1515

16+
The move operation doesn't support moving resources to new [Azure Active Directory tenant](../../active-directory/develop/quickstart-create-new-tenant.md). If the tenant IDs for the source and destination subscriptions aren't the same, use the following methods to reconcile the tenant IDs:
17+
18+
* [Transfer ownership of an Azure subscription to another account](../../cost-management-billing/manage/billing-subscription-transfer.md)
19+
* [How to associate or add an Azure subscription to Azure Active Directory](../../active-directory/fundamentals/active-directory-how-subscriptions-associated-directory.md)
20+
1621
### Upgrade a subscription
1722

1823
If you actually want to upgrade your Azure subscription (such as switching from free to pay-as-you-go), you need to convert your subscription.
@@ -26,7 +31,7 @@ If you can't convert the subscription, [create an Azure support request](../../a
2631

2732
Azure geographies, regions, and availability zones form the foundation of the Azure global infrastructure. Azure [geographies](https://azure.microsoft.com/global-infrastructure/geographies/) typically contain two or more [Azure regions](https://azure.microsoft.com/global-infrastructure/regions/). A region is an area within a geography, containing Availability Zones, and multiple data centers.
2833

29-
After deploying resources in specific Azure region, there are many reasons that you might want to move resources to a different region.
34+
After you deploy resources to a specific Azure region, there are many reasons that you might want to move resources to a different region.
3035

3136
- **Align to a region launch**: Move your resources to a newly introduced Azure region that wasn't previously available.
3237
- **Align for services/features**: Move resources to take advantage of services or features that are available in a specific region.

articles/azure-resource-manager/management/move-support-resources.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,14 +2,14 @@
22
title: Move operation support by resource type
33
description: Lists the Azure resource types that can be moved to a new resource group, subscription, or region.
44
ms.topic: conceptual
5-
ms.date: 01/23/2023
5+
ms.date: 01/30/2023
66
---
77

88
# Move operation support for resources
99

1010
This article lists whether an Azure resource type supports the move operation. It also provides information about special conditions to consider when moving a resource.
1111

12-
Before starting your move operation, review the [checklist](./move-resource-group-and-subscription.md#checklist-before-moving-resources) to make sure you have satisfied prerequisites.
12+
Before starting your move operation, review the [checklist](./move-resource-group-and-subscription.md#checklist-before-moving-resources) to make sure you have satisfied prerequisites. Moving resources across [Azure Active Directory tenants](../../active-directory/develop/quickstart-create-new-tenant.md) isn't supported.
1313

1414
> [!IMPORTANT]
1515
> In most cases, a child resource can't be moved independently from its parent resource. Child resources have a resource type in the format of `<resource-provider-namespace>/<parent-resource>/<child-resource>`. For example, `Microsoft.ServiceBus/namespaces/queues` is a child resource of `Microsoft.ServiceBus/namespaces`. When you move the parent resource, the child resource is automatically moved with it. If you don't see a child resource in this article, you can assume it is moved with the parent resource. If the parent resource doesn't support move, the child resource can't be moved.

0 commit comments

Comments
 (0)