Forum Discussion
Advanced Threat Analytics Licensing
I posted this in Yammer as well, and do apologize if you've found it in both places.
Have a bit of a licensing conundrum with Advanced Threat Analytics, and I hope someone can help. I have reviewed the Licensing Datasheet, the setup guide, and did quite a bit more research (including posts in this community), but an answer still eludes me.
The scenario: A customer wants to license everyone with ATA per-user via EM+S (but the problem exists with any per-user licensing model). There exists in the customer infrastructure a 3-tiered app with machines that request files or data from other machines. These machines will have service accounts in AD, but they are not end-user accessed.
Given no other information, I'd say 'license the service accounts with an ATA user license'. But deprecated user accounts (previously beating hearts) are monitored without having to be licensed; and I've balked on the possibility that situation implies any non-human account could be covered without having to be licensed. Plus, verbiage from the licensing guide:
π¨π»π¨ ππππππππ πππ ππππππππ
ππππ πππ ππππππ πΆπΊπ¬π (ππ ππππππ πΆπΊπ¬π ππππ
ππ ππππππ πΆπΊπ¬π) ππππ πππ ππ ππ ππππππππ
ππ πππ
ππππ π
ππππππ πππππππππππππ
ππ ππ π¨πππππ π«ππππππππ πππππππ
ππ π¨π
ππππππ
π»πππππ π¨ππππππππ.
^This leaves me with the distinct impression that licenses are not required, but not an assurance.
Can anyone provide a solid answer?
Thanks,
4 Replies
- Nicholas DiCola (SECURITY JEDI)Former Employee
Hi Steven,
For ATA, each human user must have a license. Service accounts are not considered human. Just license the people that actually exist in the organization.
Hope this helps.
- StevenHigginsCopper Contributor
Yes, this helps a ton. Much easier on both the customer and our sales teams this way.
Thanks,
- Dean_GrossSilver ContributorI asked a similar question a few months ago, you may find this thread helpful https://techcommunity.microsoft.com/t5/Microsoft-Advanced-Threat/Licensing/m-p/44696
- Joe StockerBronze ContributorMy understanding is that ATA is not a per-user licensed model application. It's the exception to the EMS license. So in other words, when you buy EMS (per user licensed model), one of the entitlements is the ability to use ATA on-premises without per user licensing required.