Azure-docs: Adding Application from different AAD

[tmhui94]

Hi, I'm wondering is it possible to add Web Application which created from different tenant ?

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 2f1c1d09-3921-2730-1b7b-2cc2d601bdd4
• Version Independent ID: 71c02dae-2cb2-07c2-dfa4-96990fee3389
• Content: How to authenticate and authorize by API in Azure Time Series Insights
• Content Source: articles/time-series-insights/time-series-insights-authentication-and-authorization.md
• Service: time-series-insights
• GitHub Login: @ashannon7
• Microsoft Alias: anshan

[ChiragMishra-MSFT]

@tmhui94 Thanks for the feedback. We are currently investigating into the issue and will update you shortly.

[Alberto-Vega]

@tmhui94 Thanks for reaching out. You should be able to do that but you will need to configure a differnt AAD scenario. With that said this issues are meant for documentation feedback or to report bugs/errors. This question seems to be better suited for the developer forums.
Would you please post in MSDN Azure Active Directory forum?

[KingdomOfEnds]

Hi @tmhui94 - I wanted to provide a link to: https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-data-access#provide-guest-access-from-another-aad-tenant. It contains steps describing how to provide guest access from another AAD tenant. Does that help to address your question?

[tmhui94]

@tmhui94 Thanks for reaching out. You should be able to do that but you will need to configure a differnt AAD scenario. With that said this issues are meant for documentation feedback or to report bugs/errors. This question seems to be better suited for the developer forums.
Would you please post in MSDN Azure Active Directory forum?

Alright, thanks for the reply @Alberto-Vega-MSFT

[tmhui94]

Hi @tmhui94 - I wanted to provide a link to: https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-data-access#provide-guest-access-from-another-aad-tenant. It contains steps describing how to provide guest access from another AAD tenant. Does that help to address your question?

@KingdomOfEnds
No, the link you provide for user from different AAD Tenant. I need it to be application instead of User.
By the way, thanks for the replay. I'll be post my question over MSDN AAD forum.

Thanks you very much :D

[KingdomOfEnds]

@tmhui94 - Oh I see! Thanks for clarifying. You want to be able to list a TSI environment that someone else (a tenant) manages and owns? I will look into that on my end as well (but of the top of my head I don't think that's presently supported).

UPDATE: I've reached out to the engineering team to give a more certain answer.

You can nevertheless interact with another tenant's TSI environment through the right permission and Oauth 2.0 configuration. If that's what your trying to do the document above can help you to achieve that.

[Alberto-Vega]

@tmhui94 Was @KingdomOfEnds helpful? Also if you created a post on MSDN please share the link here for future reference.

[tmhui94]

https://social.msdn.microsoft.com/Forums/azure/en-US/5903573e-e1ca-443e-9f40-760f7cd576a3/authentication-and-authorization-for-azure-time-series-insights-api-using-app-registration-from?forum=WindowsAzureAD

As per I though, they need it to be under the same directory only.
However, based on the explanation given from MSDN, we could actually attach the subscription from different tenant to the main tenant in order to work around.

Thanks for the help :)
@Alberto-Vega-MSFT , @KingdomOfEnds

[KingdomOfEnds]

@tmhui94 - My apologies. Yes, that approach is possible. Each Azure account has several subscriptions and tenants it can be associated with. In the upper right-hand corner you'll see the option as depicted. This will allow you, from the same user account in Azure Portal, to manage and work with resources under different subscriptions and tenants.

1. You will want to reach out to the Service Principal or point of contact for that resource.
2. They will grant you access.
3. You will then see multiple options under the switch directory tab.

It will not however appear as a listed resource under your initial subscription (you can switch directories and see it there).