For Governed Workforce add-on tenant creation, a paid Azure subscription by itself is not enough. The home/base tenant must also have at least one paid, license-based Microsoft product such as Microsoft Entra ID P1 or P2, Microsoft 365, or Windows Enterprise E3. Free and trial licenses do not qualify.
The error matches that requirement exactly: the base tenant does not have a qualifying paid license, so add-on tenant creation is blocked.
What to verify:
- Confirm which tenant is the home/base tenant used for creation.
- In that tenant, verify there is at least one paid license-based Microsoft product assigned to the tenant. A Pay-As-You-Go subscription alone does not satisfy this requirement.
- Confirm the account has the Tenant Creator role. For governed workforce tenant creation, this role is required regardless of the Restrict non-admin users from creating tenants setting.
- Confirm the selected subscription is EA or Pay-As-You-Go, and that the account has the required ARM permissions through Tenant Contributor or Subscription Owner/Creator.
- If creating through the Governed Workforce flow, optionally verify whether a default governance policy template is configured. Without the default template, tenant creation can still proceed, but the governance relationship is not automatically established.
If the goal is to create a regular workforce tenant instead of a governed add-on tenant, only paid customers can create a new Workforce tenant from the Microsoft Entra admin center. Customers using a free tenant or a trial subscription cannot create additional workforce tenants there.
Creation path:
- Go to Microsoft Entra admin center or Azure portal.
- Navigate to Entra ID > Overview > Manage tenants.
- Select Create.
- Choose the appropriate tenant type.