📖 What is Microsoft Entra ID Group-Based Licensing?
Microsoft Entra ID Group-Based Licensing is a method of assigning licenses to users by adding them to a specific security group rather than assigning licenses individually. This streamlines license management and ensures users automatically receive the required services upon group membership.
"Student, this is the most efficient way to manage licenses for large groups. If a user leaves the group, the license is automatically revoked."
📚 Certification: Microsoft 365 Administrator (MS-102)
🔑 What are the Key Concepts of Microsoft Entra ID Group-Based Licensing?
- ▸ Only security groups are supported for group-based licensing; Microsoft 365 groups cannot be used to assign licenses to their members.
- ▸ Licenses are automatically assigned when a user is added to the group and revoked immediately upon their removal from that group.
- ▸ Users can possess both direct and inherited licenses; direct assignments remain active even if the group-based license is removed.
- ▸ Administrative overhead is significantly reduced by automating license distribution, ensuring consistency across departments and reducing manual entry errors.
- ▸ When a user is a member of multiple groups with different licenses, Entra ID manages the assignments to prevent duplication.
🎯 How does Microsoft Entra ID Group-Based Licensing appear on the MS-102 Exam?
You may be asked to identify the most efficient method for assigning a standard set of licenses to a department of 200 users to minimize manual administration and ensure consistency.
A scenario might describe a user who was removed from a security group but still retains access to a specific service; you must determine if a direct license was previously assigned.
Expect questions where you must troubleshoot license assignment errors occurring when a security group's membership exceeds the number of available license seats, requiring you to purchase more seats.
❓ Frequently Asked Questions
Can I use Microsoft 365 groups for group-based licensing?
No, group-based licensing is exclusively supported for security groups. If you have users in a Microsoft 365 group, you must create a corresponding security group to manage their license assignments effectively.
What happens if a user is assigned the same license both directly and via a group?
The user will have both assignments. If the group-based license is removed, the user will still retain the license because the direct assignment remains in place until manually revoked by an administrator.
How does the system handle license shortages when using groups?
The license is assigned to the group, but individual users will show an 'Assignment Error' state if the total number of group members exceeds the available license count in the tenant.