Switching Azure Directories as a CSP

[jra-sgng]

Is there a possibility to switch the Azure directory without explicitly signing in with a user in that particular tenant.
Googling this issue only provides the answer that you should change the setting azure.tenant but it seems that setting was only available in the old Azure extension.
Here the link to the same issue but the old extensions: microsoft/vscode-azure-account#166

[alexweininger]

Have you tried using the Accounts & Tenants view? It was released in v0.10.0 https://github.com/microsoft/vscode-azureresourcegroups/releases/tag/v0.10.0

In this view you can manage signing in to multiple accounts and multiple tenants within each account.

Here's a gif showing it in action:

[jra-sgng]

Thank you for the response.
This only allows me to sign in with an additional accounts though. My trouble is about accessing a subscription located in a different directory (tenant) to which my user in my own tenant has access to. Pretty much what you can do in the Azure Portal itself.

Or another example is when you connect using Azure Powershell: Connect-AzAccount
You will have access to all the subscriptions your user has access to in your home tenant.

But if i connect using: Connect-AzAccount -Tenant partnertenantdomain.com
And then if Access Control allows I will have access to subscriptions which reside in a different tenant than my home tenant, because my user has explicit access to that Partner Tenants subscription.

[alexweininger]

So the tenant you want to access doesn't show up in the list of tenants under your account in the Accounts & Tenants view?

[jra-sgng]

No only my "Home" Tenant.
I can log in using another account in the other tenant like you do in your GIF, but I should be able to access the same subscription using my own account without having to add another account, like when you connect using Powershell and the -Tenant flag.

[alexweininger]

Ok, thanks for the patience, I'm still trying to fully grasp the scenario. My assumption so far has been: If an account has access to a tenant, it should show up under the account in the Accounts & Tenants view. I'm wondering if this is a bug with the Accounts & Tenants view. I know you showed a screenshot of this above, but does this tenant show up in the "Directories + subscriptions" page in the portal?

[jra-sgng]

Yeah it's kinda weird, when I am in my own Azure Portal and go to the directories then all the ones I have access to don't show up. We have GDAP Relationships with all customer tenants, so I can access their directories using portal.azure.com/partnertenantdomain.com, here I can see the subscription I have explicit access to and when I then go to Switch Directories I can now see the customer directory and my home directory. It does seem like it doesn't show all directories by default to which I have access to. But again, I can access their subscriptions, either by going to the URL or by connecting explicitly via Powershell.

[alexweininger]

Ah ok. That's not something we knew was possible when we wrote this feature. We'll have to do some research into what's really going on and what a GDAP relationship is 😄