Challenges with old tenants

[ChrisTryti-AiCom]

Hi, in my previous role, i had access to customers and partners tenants. Now i cannot log into those tenants and leave them, as i dont have access anymore, but the organizational tenants create problems for me. Can i please get help to leave them? Here is the error:

Retrieving tenants and subscriptions for the selection...
Authentication failed against tenant 1a092f68-5741-455a-8057-2acdb897a850 'HMGAdmin': SubError: message_only V2Error: invalid_grant AADSTS53003: Access has been blocked by Conditional Access policies. The access policy does not allow token issuance. Trace ID: 5a37effb-0b52-4976-a0d5-7f99e6750500 Correlation ID: 38632187-65cf-4a62-8a4c-12729531e3c3 Timestamp: 2026-04-20 13:31:01Z. Status: Response_Status.Status_InteractionRequired, Error code: 3399614476, Tag: 557973645
Authentication failed against tenant 76a2ae5a-9f00-4f6b-95ed-5d33d77c4d61 'Capgemini': SubError: basic_action V2Error: invalid_grant AADSTS50079: Due to a configuration change made by your administrator, or because you moved to a new location, you must enroll in multi-factor authentication to access '797f4846-ba00-4fd7-ba43-dac1f8f63013'. Trace ID: 37d8dd8f-acb8-4c22-a89c-a11b6ba80900 Correlation ID: f238e093-703b-44e1-bf43-035b79fd5375 Timestamp: 2026-04-20 13:31:03Z. Status: Response_Status.Status_InteractionRequired, Error code: 3399614476, Tag: 557973645
Authentication failed against tenant bc1d8991-4a28-4552-abc1-ace7ae108274 'Norsk Hydro ASA': SubError: basic_action V2Error: invalid_grant AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '797f4846-ba00-4fd7-ba43-dac1f8f63013'. Trace ID: d42a4f84-adf9-41b7-b5ee-37db5bea0b00 Correlation ID: f9fe5f08-32af-4573-8273-59466b3f64db Timestamp: 2026-04-20 13:31:04Z. Status: Response_Status.Status_InteractionRequired, Error code: 3399614476, Tag: 557973645
Authentication failed against tenant eadac26c-2300-4e7b-8b0f-63dff42f1d8d 'Ingraphic': SubError: basic_action V2Error: invalid_grant AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '797f4846-ba00-4fd7-ba43-dac1f8f63013'. Trace ID: 4b48c733-11a2-424c-b82e-a88e1b910c00 Correlation ID: 8dc9eb1f-c701-4666-a5ce-a7c8af0ef181 Timestamp: 2026-04-20 13:31:05Z. Status: Response_Status.Status_InteractionRequired, Error code: 3399614476, Tag: 557973645

If you need to access subscriptions in the following tenants, please use az login --tenant TENANT_ID.
1a092f68-5741-455a-8057-2acdb897a850 'HMGAdmin'
76a2ae5a-9f00-4f6b-95ed-5d33d77c4d61 'Capgemini'
bc1d8991-4a28-4552-abc1-ace7ae108274 'Norsk Hydro ASA'
eadac26c-2300-4e7b-8b0f-63dff42f1d8d 'Ingraphic'

Please help me leave

1a092f68-5741-455a-8057-2acdb897a850 'HMGAdmin'
76a2ae5a-9f00-4f6b-95ed-5d33d77c4d61 'Capgemini'
bc1d8991-4a28-4552-abc1-ace7ae108274 'Norsk Hydro ASA'
eadac26c-2300-4e7b-8b0f-63dff42f1d8d 'Ingraphic'

[yonzhan]

Thank you for opening this issue, we will look into it.

[microsoft-github-policy-service]

🔔 Routing this issue to @act-identity-squad.

[isra-fel]

Thank you for reporting this. The errors you're seeing are expected — those tenants have Conditional Access or MFA policies that block your current session, which is the tenant admin's configuration.

To leave tenants you no longer need access to:

1. Go to https://myaccount.microsoft.com/organizations
2. For each tenant you want to leave, click Leave organization

Alternatively, if the "Leave" option is not available, you'll need to contact the tenant administrator to remove your guest account.

Note that az login will still succeed for your home tenant — the warnings about other tenants are informational and won't block your login.

As this is an Entra ID tenant membership question rather than an Azure CLI issue, we recommend using the portal steps above. Please let us know if you have further questions about CLI behavior.

[microsoft-github-policy-service]

🔔 Routing this issue to @act-identity-squad.