Is there a solution? Hmm, there is a workaround which isn\u2019t pretty but it works. There are ways to manage the Azure directory:<\/p>\n
- \n
- You have also deployed Office 365 via CSP with the same .onmicrosoft.com domain. You can create users and Office 365 groups in the Office Admin portal.<\/li>\n
- You can also share the directory of the CSP account into another Azure subscription that does support Azure v1; from there, we can manage the directory.<\/li>\n<\/ul>\n
In my lab, I have the following CSP services with a common .onmicrosoft.com domain (deployed by the reseller – my employers, in this case, because we are a Tier 2 distributor of CSP):<\/p>\n
- \n
- Office 365<\/li>\n
- EMS<\/li>\n
- Azure<\/li>\n<\/ul>\n
![\"image\"](\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2016\/05\/image_thumb2.png\" "\\"image\\"")
<\/a><\/p>\nI also have an Azure in Open subscription. I can easily create users in my CSP subscription using Azure AD Connect (from on premises domain) or using the Office 365 admin portal. But what about the other features of Azure AD? I\u2019ll need to share the CSP domain with a subscription that does support the classic management portal.<\/p>\n
Here\u2019s what you\u2019ll do:<\/p>\n
- \n
- Use another Azure subscription that is not in CSP. Maybe you already have one; if not, start a trial and make sure you don\u2019t enable spending – you\u2019ll still need to verify credit card details. You won\u2019t be charged for managing Azure AD, and you\u2019ll still have access to the subscription when the trial ends – you just can\u2019t deploy things that will cost money, e.g. storage, VMs, and so on.<\/li>\n
- Sign into https:\/\/manage.windowsazure.com<\/a> using valid Microsoft Account (Live ID) credentials of the non-CSP subscription and browse to Active Directory.<\/li>\n
- Click New > Active Directory > Directory > Custom Create<\/li>\n
- Select the option to Use Existing Directory. Make sure you check the box to sign out.<\/li>\n
- You\u2019ll be signed out and a new login will appear. Sign in with the admin credentials for your CSP domain.<\/li>\n
- Verify that you want to share the domain. You\u2019ll be signed out again.<\/li>\n
- Sign into the classic management portal again using your non-CSP credentials. If all has worked correctly, you should be able to see and manage the CSP domain.<\/li>\n<\/ol>\n
This is how I enabled multi-factor authentication, created users, groups, and other cool things in an CSP Azure domain.<\/p>\n
Technorati Tags: Azure<\/a>,Active Directory<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"In this post I\u2019ll describe two ways that you can use to manage Azure AD in a CSP subscription using a GUI. CSP, CSP, CSP – that\u2019s all you can hear these days in the Microsoft channel. In short, CSP is a new channel by which customers can buy Azure or partners can resell Azure, … Continue reading “How To Manage Azure AD in CSP”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":19530,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[5],"tags":[169,170],"class_list":["post-19528","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure","tag-active-directory","tag-azure"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t
![\"image\"](\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2016\/05\/image2.png\" "\\"image\\"")
<\/a><\/p>\n