Ensures that subscriptions cannot be moved into or out of the Microsoft Entra tenant.
Subscription owners are able to move subscriptions into and out of a Microsoft Entra tenant. A subscription moved into a tenant may sit under a scope where other users hold elevated permissions, and a subscription moved out takes its resources with it. Blocking both transfer directions prevents loss of data and unapproved changes.
Set Subscription leaving Microsoft Entra tenant and Subscription entering Microsoft Entra tenant to Permit no one from the subscription policy management page.