Preventing users from changing the subscriptions in Azure Active Directory Tenant (AAD)

By default users have the ability to change the subscriptions from a default Azure Active Directory to some other Azure Active Directory. This is a security risk and to prevent this follow the below steps

Step 1: Go to your Subscriptions

Step 2: Click on Manage policies

Step 3: Click on Yes for Access Management for Azure Resources & then save the policies as shown below

Step 4: Then click on “Allow Everyone” to allow subscriptions to leave Azure Active Directory & you can also allow subscriptions to enter Azure Active Directory

By this we can subscriptions to enter as well as leave Azure Active Directory