You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
**Moving a key vault to another subscription will cause a breaking change to your environment.**
@@ -33,7 +34,7 @@ When you create a key vault, it is automatically tied to the default Azure Activ
33
34
34
35
Some service principals (users and applications) are bound to a specific tenant. If you move your key vault to a subscription in another tenant, there is a chance that you will not be able to restore access to a specific service principal. Check to make sure that all essential service principals exist in the tenant where you are moving your key vault.
35
36
36
-
## Design Considerations
37
+
## Design considerations
37
38
38
39
Your organization may have implemented Azure Policy with enforcement or exclusions at the subscription level. There may be a different set of policy assignments in the subscription where your key vault currently exists and the subscription where you are moving your key vault. A conflict in policy requirements has the potential to break your applications.
39
40
@@ -53,7 +54,7 @@ Make sure that you go to the Azure Policy page on the Azure portal and look at t
53
54
54
55
## Procedure
55
56
56
-
### Initial Steps (Moving Key Vault)
57
+
### Initial steps (moving Key Vault)
57
58
58
59
1. Log in to the Azure portal
59
60
2. Navigate to your key vault
@@ -65,9 +66,9 @@ Make sure that you go to the Azure Policy page on the Azure portal and look at t
65
66
8. Acknowledge the warning regarding moving resources
66
67
9. Select "OK"
67
68
68
-
### Additional Steps (Post Move)
69
+
### Additional steps (post move)
69
70
70
-
Now that you have moved your key vault to the new subscription, you need to update the tenant id and remove old access policies. Here are tutorials for these steps in PowerShell and Azure CLI.
71
+
Now that you have moved your key vault to the new subscription, you need to update the tenant ID and remove old access policies. Here are tutorials for these steps in PowerShell and Azure CLI.
71
72
72
73
```azurepowershell
73
74
Select-AzSubscription -SubscriptionId <your-subscriptionId> # Select your Azure Subscription
0 commit comments