- You should not purchase subscriptions for internal use from the Partner Center AAD Tenant that you use for your customers.
- The best practice is to use your Partner Center Dashboard only for your distribution business. For that purpose, you will minimize the number of associates who have access to that AAD Tenant, therefore that AAD Tenant is easier to secure and protect from threats. Substantially all of those users also do not need any licensed Subscriptions to perform the duties of a MS Partner, so there isn’t a cost factor.
Then, you can create a separate Customer AAD Tenant for your internal business, which is where you can purchase the Subscriptions you need for the internal needs. This Customer AAD Tenant can be associated to your Partner Center Dashboard AAD Tenant so that your Reseller Distribution business can then purchase CSP Subscriptions for your own Customer AAD Tenant.
Note: Reminder that Microsoft will begin technical enforcement of Partner Center Security Requirements shortly. At this time, any non-compliant environments will see reduced- or no- ability to transact CSP until they achieve compliance.
Even though the Security Requirements do not apply to Customer AAD Tenants, it is still a best-practice to apply Multi-Factor Authentication to the Customer AAD Tenant as well.