Quickstart: Create a new tenant in Microsoft Entra ID

You can do all of your administrative tasks using the Microsoft Entra admin center, including creating a new tenant for your organization.

In this quickstart article, you'll learn how to get to the Azure portal and Microsoft Entra ID, and you'll learn how to create a basic tenant for your organization.

Create a new tenant for your organization

After you sign in to the Azure portal, you can create a new tenant for your organization. Your new tenant represents your organization and helps you to manage a specific instance of Microsoft Cloud services for your internal and external users.

To create a new tenant

1. Sign in to the Azure portal.

2. From the Azure portal menu, select Microsoft Entra ID.

3. Navigate to Identity > Overview > Manage tenants.

4. Select Create.

   

5. On the Basics tab, select the type of tenant you want to create, either Microsoft Entra ID or Microsoft Entra ID (B2C).

6. Select Next: Configuration to move to the Configuration tab.

7. On the Configuration tab, enter the following information:

   

   • Type your desired Organization name (for example Contoso Organization) into the Organization name box.
   • Type your desired Initial domain name (for example Contosoorg) into the Initial domain name box.
   • Select your desired Country/Region or leave the United States option in the Country or region box.

8. Select Next: Review + Create. Review the information you entered and if the information is correct, select Create in the lower left corner.

Your new tenant is created with the domain contoso.onmicrosoft.com.

Your user account in the new tenant

When you create a new Microsoft Entra tenant, you become the first user of that tenant. As the first user, you're automatically assigned the Global Administrator role. Review your user account by navigating to the Users page.

By default, you're also listed as the technical contact for the tenant. Technical contact information is something you can change in Properties.

Microsoft recommends that organizations have two cloud-only emergency access accounts permanently assigned the Global Administrator role. These accounts are highly privileged and aren't assigned to specific individuals. The accounts are limited to emergency or "break glass" scenarios where normal accounts can't be used or all other administrators are accidentally locked out. These accounts should be created following the emergency access account recommendations.

Clean up resources

If you're not going to continue to use this application, you can delete the tenant using the following steps:

• Ensure that you're signed in to the directory that you want to delete through the Directory + subscription filter in the Azure portal. Switch to the target directory if needed.

• Select Microsoft Entra ID, and then on the Contoso - Overview page, select Delete directory.

  The tenant and its associated information are deleted.

  

Next steps

• Change or add other domain names, see How to add a custom domain name to Microsoft Entra ID.

• Add users, see Add or delete a new user

• Add groups and members, see Create a basic group and add members.

• Learn about Azure role-based access control (RBAC) and Conditional Access to help manage your organization's application and resource access.

• Learn about Microsoft Entra ID, including basic licensing information, terminology, and associated features.