Hi,
I have a scenario that I work with a customer and the customer owns the Microsoft Azure account. He created a user account for me in his Default Directory (thuru@customer.onmicrosoft.com) with the User role and added me as a co administrator for the development subscription. (This Azure account has 3 subscriptions others are production and test).
Things are fine.
Then we had to do perform some Azure AD related operations so customer created another Azure AD instance (named DevAD) and created another user (admin@cusotmerdev.onmicrosoft.com) in the DevAD with the Global Admin privileges. He also added admin@customerdev.onmicrosoft.com as a co administrator for the development subscription. (In order to do this he added admin@customerdev.onmicrosoft.com as a User to the Default Directory as well.
I have few clarifications from this point on wards.
When I type Add-AzureAccount in PowerShell and try to connect I get authenticated. Is it through the Default Directory or DevAD ?
When I login through the browser I get the following message
The output I get from PowerShell
PowerShell shows that the user has a subscription. But the subscription is belonged to the Default Directory.
I have 2 tenants and obviously it is my DevAD and Default Directory.
Why I can't I access the subscription even though I'm a User in the Default Directory ?
My blog : http://thuruinhttp.wordpress.com