Team Services: Change Azure Active Directory (Azure AD) tenant

Last Update: 6/30/2017

Team Services

To move your Visual Studio Team Services account between directories (tenants) in Azure AD, disconnect your account from its current directory, then reconnect your account to the directory that you want.

You'll need:

  • Team Services account owner permissions. Only account owners can manage directory connections. How do I find the account owner?

  • At least Basic access, not Stakeholder

  • Global administrator permissions for your source and target Azure AD directories (tenants). Learn how to manage Azure AD administrators.

  • Co-administrator permissions for the Azure subscriptions associated with your source and target directories. Learn how to manage Azure subscription administrators.

  • A temporary Microsoft account, like @outlook.com, to move your Team Services account between directories. This Microsoft account will need these permissions, which you'll set up below:

    • Source directory global administrator
    • (if adding users to target directory) Target directory user administrator
    • Azure subscription Co-administrator for both directories
    • Team Services account owner. Only account owners can change directory connections.

What happens to current users?

Your work in Team Services is associated with your sign-in address. During directory migration, all Team Services account users need Microsoft accounts to sign in. They'll continue working seamlessly if their Microsoft accounts share the same sign-in addresses that they use now. Otherwise, they'll lose access until you finish the migration or unless you add them as new users to your Team Services account.

After migration, users must be members of the target directory to get access to your Team Services account. They'll continue working seamlessly if they use the same sign-in addresses that they use now. Otherwise, you'll have to add them as new users to your Team Services account. Your organization might have policies about adding external users to the directory, so find out more first.

Prepare your source directory

You'll now set up source directory permissions and Team Services account owner permissions so you can perform the migration.

Set up your Microsoft account as Azure subscription co-administrator

See steps here.

Why am I asked to choose between my work or school account and my personal account?

Set up your Microsoft account as global administrator in your source directory

Add your account to the directory, and in the Tell us about this user step, choose User with an existing Microsoft account. In the user profile step, choose Global Admin.

Set up your Microsoft account as your Team Services account owner

  1. Sign in to your Team Services account (http://{youraccount}.visualstudio.com) as the account owner.

    Why am I asked to choose between my work or school account and my personal account?

  2. View your Team Services account users.

    Users hub

  3. Add your Microsoft account to your Team Services account as a user.

    Add your Microsoft account

    Your Microsoft account appears in this list because you added this user to the source directory.

  4. Sign in to your Team Services account with your Microsoft account, so that Team Services can validate this user. Otherwise, your Microsoft account won't appear in the possible account owners list.

  5. Sign back in to your Team Services account as the account owner. Now change the Team Services account owner to your Microsoft account. Learn how to change Team Services account owners.

    Important: Before you disconnect your Team Services account, make sure that this Microsoft account is the Team Services account owner.

Prepare your target directory

Now you'll set up target directory permissions for your Microsoft account to continue performing the migration. You'll also add your Team Services account users to the target directory, if they're not members already, so they can get Team Services account access as directory members.

Set up your Microsoft account as Azure subscription Co-administrator

See steps here.

Why am I asked to choose between my work or school account and my personal account?

Set up your Microsoft account as a user administrator in the target directory

  1. Find and select the directory that you want connected to your Team Services account.

    Find target directory

  2. Add your account to the directory, and in the Tell us about this user step, choose User with an existing Microsoft account. In the user profile step, choose the user administrator role.

Migrate your Team Services account between directories

Disconnect your Team Services account from the source directory

  1. Sign in to the Azure classic portal with the Microsoft account that you're using for the migration.

  2. Select your Team Services account.

    Select your Team Services account

  3. Configure your account.

    Configure your account

  4. Disconnect your account from the source directory.

    Disconnect account

    Select None, no directory connection

    After you save your changes, your Team Services account is disconnected. Now, only users with Microsoft accounts can sign in to your Team Services account. This is why we previously set up your Microsoft account as a Team Services account user.

    Your account is now disconnected

  5. Unlink your Team Services account from the source Azure subscription.

    Select your Team Services account

    Your Team Services account is removed from the Azure classic portal. You can now link your account to another Azure subscription and directory.

Connect your Team Services account to the target directory

  1. Link your Team Services account to the target Azure subscription.

    Link Team Services account

    Select your Team Services account and target Azure subscription

  2. Configure your account.

    Configure your account

  3. Connect your account to the target directory. Save your changes when you're done.

    Connect your Team Services account

    Select target directory

  4. To check that you finished this task successfully, invite a user from the target directory to your Team Services account. Confirm that they can sign in. Learn how to add users and assign access.

  5. Add the remaining users from the target directory to your Team Services account.

  6. If you use tools that run outside a web browser, like the Git command line tool, then your alternate credentials for those tools won't work anymore. You must set up your credentials again for the Team Services account that you connected.

Reassign Team Services account ownership to a directory member

  1. Sign in to your Team Services account (https://{youraccount}.visualstudio.com) with the Microsoft account that you used for the migration.

  2. Reassign ownership for your Team Services account to a directory member. Learn how to change Team Services account owners.

  3. Remove the Microsoft account that you used for the migration from your source and target Azure subscriptions and directories.

Q&A

Q: Why don't I see the directory that I want to connect? What do I do?

A: This might happen because:

  • You don't have administrator permissions to manage directory connections.

  • You don't have a valid "full" Azure subscription, like a "Pay-As-You-Go" subscription, associated with the directory that you want to use. This typically happens with Office 365 Azure AD.

  • Your Team Services account isn't linked to the Azure subscription associated with your directory.

Learn how to resolve why you can't see your directory.

Q: How do I find the account owner?

If you have at least Basic access, you can find the current owner in your Team Services account settings.

  1. Go to your Team Services account settings.

    Go to account settings

  2. Under Settings, find the current owner.

    Find current owner

Q: Why don't I see the Team Services accounts that I own after I sign in to my Visual Studio profile on visualstudio.com?

A: The list of accounts that you own are associated with the identity that you use to sign in to Visual Studio Team Services.

If you were asked to choose between your personal Microsoft account, or your work or school account when you signed in, you might have selected the wrong identity.

Choose work or school account, or personal Microsoft account

Please try signing out completely from Team Services, then sign in again, and select your other identity.

Here's how you can sign out completely because just closing your browser doesn't always sign you out completely from Team Services:

  1. Close all browsers, including those that aren't running Team Services.

  2. Open a private or incognito browsing session.

  3. Go to this URL: http://aka.ms/vssignout

    You'll get a message that says "Sign out in progress". After you're signed out, you're redirected to the Visual Studio page @www.visualstudio.com.

    Tip If the sign-out page takes more than a minute, close the browser, and continue.

  4. Sign in to Visual Studio Team Services again. Select your other identity.

Q: Why must I choose between a "work or school account" and my "personal account"?

A: This happens when you sign-in with an email address, like jamalhartnett@fabrikam.com, that's shared by your personal Microsoft account and by your work account or school account. Although both identities use the same sign-in address, they're still separate identities with different profiles, security settings, and permissions, so you see this screen when you sign in:

Choose work or school account, or personal Microsoft account

  • Choose Work or school account if you used this identity to create your Team Services account or signed in with this identity before. For example, choose this option if you used to sign in to Team Services here:

    Old signin for work or school accounts

    Your identity is authenticated by your organization's directory in Azure Active Directory (Azure AD), which controls access to your Team Services account.

  • Choose Personal account if you used your Microsoft account with Team Services. For example, choose this option if you used to sign in to Team Services here:

    Old signin for Microsoft account

    Your identity is authenticated by the global directory for Microsoft accounts.

Q: Why can't I sign in after I choose either "personal Microsoft account" or "work or school account"?

A: This happens when your sign-in address is shared by your personal Microsoft account and by your work account or school account, but your selected identity doesn't have access. Although both identities have the same sign-in address, they're still separate identities with different profiles, security settings, and permissions.

Please try signing out completely from Team Services by following the steps below because just closing your browser might not sign you out completely from Team Services. Then sign in again to Team Services, and select your other identity:

  1. Close all browsers, including those that aren't running Team Services.

  2. Open a private or incognito browsing session.

  3. Go to this URL: http://aka.ms/vssignout

    You'll get a message that says "Sign out in progress". After you're signed out, you're redirected to the Visual Studio page @www.visualstudio.com.

    Tip If the sign-out page takes more than a minute, close the browser, and continue.

  4. Sign in to Team Services again. Select your other identity.

Q: How do I get help or support for Team Services?

A: Try the Team Services forum or Team Services Support.