Multi tenant environments

This article delves into the concept of multi-tenant environments, an essential topic for those preparing for the AZ-104: Microsoft Azure Administrator exam. The discussion highlights four key principles that define tenant operations within Microsoft Entra ID.

Relationship Independence

Each Microsoft Entra ID organization, often referred to as a tenant, functions autonomously. Unlike on-premises Active Directory—with its intricate structures like forests, root domains, trees, and trusts—cloud environments feature a flat hierarchy. There is no parent-child or hierarchical relationship between tenants. Multiple tenants can coexist, each managing its own subscriptions, users, groups, and resources.

Resource Independence

Actions performed in one tenant—whether it's the creation or deletion of resources—do not influence other tenants. This strict isolation guarantees that each tenant's data and assets remain secure and separate from those in other tenants.

Administration Independence

Administrative rights are tenant-specific. For example, holding a global administrator role in one tenant does not automatically extend similar privileges in another tenant. If global rights are required in Tenant B, they must be explicitly granted for that tenant. This separation reinforces a secure and well-controlled management environment across all tenants.

Synchronization Independence

Each Microsoft Entra ID tenant can configure its own on-premises synchronization approach based on its unique needs. Modifications in the synchronization settings of one tenant do not impact any other tenant. This independent synchronization setup offers flexibility and streamlined management.

These principles collectively ensure that even though tenants share the underlying Azure data center infrastructure, each tenant enjoys enhanced security, precise control, and tailored customization.

Managing Tenants in the Azure Portal

The Azure portal facilitates effortless tenant management, allowing you to switch between different tenants you have access to. For example, your personal account might be set as your home tenant. Previously displayed in a single location, tenant information has now been moved to the settings icon.

Clicking on the settings icon reveals a list of tenants accessible to you. This feature makes it simple to switch profiles and manage tenant-specific resources. Notably, the visual theme of the portal—including its color scheme—changes dynamically to reflect the identity of the currently selected tenant.

Switching between tenants enables you to manage your home tenant as well as additional tenants you might be invited to join through a B2B process. Even though this is not a primary focus of the exam, understanding the concept of multiple tenant memberships is critical.

With this overview, you now understand the foundational aspects of administering identity within Microsoft Entra ID as part of the AZ-104: Microsoft Azure Administrator training. Next, we will explore governance and compliance.