Forum Discussion
Is Azure Active Directory (Azure AD) Premium still the only way to prevent group sprawl?
- No, as you well mention to absolutely prevent Groups creation in your tenant, you need an Azure AD Premium subscription
MicrosoftLicensing requirements are documented here: https://support.office.com/en-us/article/learn-about-office-365-groups-b565caa1-5c40-40ef-9915-60fdb2d97fa2?ui=en-US&rs=en-US&ad=US#ID0EAACAAA=Features_&_Licensing
Thanks cfiessinger.
That page's Feature's and Licensing section ends with this curious note:
IMPORTANT: For all the Groups features, if you have an Azure AD Premium subscription, users can join the group whether or not they have an AAD P1 license assigned to them. Licensing isn't enforced.
Periodically we will generate usage reports that tell you which users are missing a license, and need one assigned to them to be compliant with the licensing requirements. For example, let's say a user doesn't have a license and they are added to a group where the naming policy is enforced. The report will flag for you that they need a license.
It sure seems that Microsoft is highly dis-incentivizing organizations from managing their Groups. (Dynamic membership; Creation controls; Naming Policies; etc. all require a premium license)
- I continue to find this an odd approach. It makes compliance difficult because of the many routes to generating an Office 365 Group. Admins beware just because there is no enforcement there is still a liability!
That is ridiculous !
I double checked the link as I'm pretty sure 18 months ago you never used to need AAD P!
