Forum Discussion
User classed as internal or external for Azure AD P2.
Thanks for the responses so far.
In this case users from tenant (A) would access resources in tenant (B) but would be required to activate an eligible role in tenant (B) using PIM.
In this case, the tenant (A) user has AAD P2, tenant (B) has at least one AAD P2 to enable the features. Would they still require an AAD P2 license in tenant (B) for their guest/external user account to use PIM or are these features included in the PAYG capacity as per this document?
Pricing - Active Directory External Identities | Microsoft Azure
- Yes, we are a CSP Direct partner.
My apologies if I'm missing something, but may I ask why the FAQ info in the link that you provided along with Rahul-kumar's response does not provide the information that you're looking for?
I may need you to clarify your question if the FAQ & other info is not addressing your scenario
Regards,Microsoft CSP Licensing Concierge
Yes there are still questions. Please understand I am referring specifically about users in tenant (A) accessing resources in tenant (B) as external (guest) users. Note also that the customer owns both tenants. External users would be activating PIM roles to manage Azure resources.Rahul mentions this "they might not require an assigned Azure AD P2 license in the separate tenant (B) if they are only accessing resources there as guests." and also comments that I should engage with a Microsoft or a licensing specialist who can provide guidance. Hence my follow up question.
In this case, are the users from tenant (A) classed as external in tenant (B) and can these external users benefit from the full AAD P2 features, according to this document?
Pricing - Active Directory External Identities | Microsoft Azure
Thanks,
Nick