Edit

Share via

Create a governed workforce tenant (preview)

Important

Microsoft Entra Tenant Governance is currently in PREVIEW. This information relates to a prerelease product that might be substantially modified before release. Microsoft makes no warranties, expressed or implied, with respect to the information provided here.

When you create a tenant using the Governed Workforce option in the Microsoft Entra admin center, the secure add-on tenant creation flow automatically:

Prerequisites

  • You must have at least Tenant Contributor permissions on at least one Microsoft Customer Agreement (MCA) subscription.
  • Enterprise Agreement (EA) subscriptions aren't supported.
  • The default governance policy template must be configured in the governing tenant. The tenant creation service uses only the default template (ID: default). If the default template isn't defined, the secure add-on tenant creation flow doesn't establish a governance relationship, even if other templates exist.

Create the tenant

For step-by-step instructions on creating a governed workforce tenant, see the Governed Workforce tab in Quickstart: Create a new tenant in Microsoft Entra ID.

What happens after tenant creation

After the system creates the tenant:

  1. A governance relationship forms between your home tenant and the new tenant, using the default governance policy template.
  2. The policy template provisions resources including cross-tenant access settings, granular delegated admin privileges (GDAP) assignments, and service principals.
  3. A Microsoft Entra ID Free billing asset appears in your Azure subscription under the resource group you selected.
  4. The new tenant appears in your related tenants inventory.

To learn more about governance relationships and policy templates, see Governance relationships and Governance policy templates.

Related content

  • Last updated on