Forum Discussion
dynamic group based on assigned license
Hi, is it possible to create a group with users based on a assigned license? So i want to include all users into this specific group who has e.g. an E3 license assigned, but not an E5. It se...
I would like to suggest that most policies should go to device groups or „all devices“. This makes the deployment more efficient if you‘re going to use the pre-provisioning feature. This is my personal best practice in nearly any customer environment. There are only very few policies that are applied to users in my cases.
That was my original plan but nearly everything I read online says to apply to users not devices except for kiosks. Good to know that applying to devices works good for you, I think for my use case it makess the most sense since all my users get the same experience and every machine should be uniform.
- As I see, that's was an active topic for long time, I hope you could see this PatrickF11
I just have a question because it seems you find a solution that worked for you but I'm not sure I catch it.
As far as I understood, the Service Plans (either by name or ID) are the sub-components included in one license. So, with the method explained here I can't search for users hat have an specific license but specific Service Plans (that could be included in several different licenses). For example, the "9aaf7827-d63c-4b61-89c3-182f06f82e5c" identifies the Echange Online Plan 1 mailbox that is included in lots of different Microsoft 365 licenses.
So, again, if I understood it right; in order to query users having one specific licenses, the query should contain the combination of all Service Plan ID (or names) that are specific for the license I want to search for. Or at least a sub-set of them that are different of any other licenses I've in my tenant so there would be no overlap.
But with the insane amounts of service plans that some licenses have, it seems a HUGE headache to write the query properly. I even wonder if the query would reach any character limitation way before it could be completed.
Isn't there any way to filter by license GUID? (the ones listed here for example: https://learn.microsoft.com/en-us/entra/identity/users/licensing-service-plan-reference)
Regards - I don’t k wo where you‘ve read this, but this is nonsense. 🙂 I work in big customers projects implementing Intune for years, windows, iOS, Android, Linux.
Device based is not bad, trust me 🙂
