Fixing Azure Account Active Directory Association Error
May 15, 2020
If you’ve tried to create a Microsoft Azure subscription using an existing Microsoft 365 (formerly Office 365) or Microsoft Power BI account, depending on how the account is setup you might have been redirected to this static page which displays the following error message:
Your account belongs to a directory that cannot be associated with an Azure subscription. Please sign in with a different account.
It’s not immediately clear what this means. After a bit of research, I was able to establish that the directory referred to is an Azure Active Directory. When signing up for a Microsoft 365 or Power BI account, an unmanaged Azure Active Directory is created in the background which your account is then assigned to. The problem here is that we can’t create an Azure subscription unless this account has the Global Administrator role within the Azure Active Directory.
The resolution is mentioned in this Microsoft Support page. A simplified version is as follows:
- Head to the admin takeover page within the Microsoft 365 portal.
- If you’re not already signed in, ensure that you’re signed in using your Microsoft 365 account, which should have the same domain as the one which you’re receiving the Azure subscription error on. If you have a Power BI account rather than a Microsoft 365 account, then sign in using those credentials instead.
- You’ll be presented with an option to verify that you’re the owner of the domain. Add the
TXT
record within the settings of your DNS. This could take up to 72 hours to propogate, depending on your DNS provider. - Click to verify - Azure will check that the
TXT
record exists on the domain.
You should now be able to create an Azure subscription using this account.