Forum Discussion
Dynamic Groups - Premium License Impact
This is an issue that has been discussed ever since Microsoft introduced AAD dynamic groups. Any account that comes under the scope of a query used for an AAD dynamic group - including those used for Office 365 dynamic groups - require a license. End of story.
The issue does not arise for enterprise tenants who license AAD premium for other reasons (like writeback to an on-premises AD). It does if you have no other reason to use AAD premium...
While reading https://docs.microsoft.com/en-us/azure/active-directory/active-directory-accessmanagement-groups-with-advanced-rules. I saw the following:
Dynamic memberships for groups require an Azure AD Premium license to be assigned to+
- The administrator who manages the rule on a group
- All members of the group
I am concerned that it is very easy to violate the terms of the license.
I'm really wondering if we need to create our own tools to monitor compliance or if there is something provided by MS which I don't know about.
This is an issue that has been discussed ever since Microsoft introduced AAD dynamic groups. Any account that comes under the scope of a query used for an AAD dynamic group - including those used for Office 365 dynamic groups - require a license. End of story.
The issue does not arise for enterprise tenants who license AAD premium for other reasons (like writeback to an on-premises AD). It does if you have no other reason to use AAD premium...