Home

Conditional Access / Azure Premium licensing

%3CLINGO-SUB%20id%3D%22lingo-sub-222698%22%20slang%3D%22en-US%22%3EConditional%20Access%20%2F%20Azure%20Premium%20licensing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-222698%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3EHope%20this%20is%20the%20correct%20forum.%3C%2FP%3E%3CP%3EI%20would%20like%20to%20restrict%20access%20to%20our%20O365%20webapps%20to%20a%20single%20IP.%20I%20have%20successfully%20tested%20this%20with%20conditional%20access%20which%20requires%20an%20Azure%20Active%20Directory%20Premium%20license.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20question%20is%20how%20many%20Azure%20Active%20Directory%20Premium%20license%20are%20required%3F%3C%2FP%3E%3CP%3EI%20currently%20have%20a%20single%20license%2C%20which%20allows%20me%20to%20use%20conditional%20access%20and%20functions%20for%20all%20users.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELegally%2C%20is%20it%20required%20to%20license%20all%20users%20accounts%2C%20only%20the%20accounts%20that%20I%20want%20conditional%20access%20to%20apply%2C%20or%20is%20a%20single%20license%20enough%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-222698%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-222741%22%20slang%3D%22en-US%22%3ERe%3A%20Conditional%20Access%20%2F%20Azure%20Premium%20licensing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-222741%22%20slang%3D%22en-US%22%3E%3CP%3EAs%20I%20understand%20it%2C%20all%20users%20that%20are%20managed%20with%20an%20Azure%20AD%20Premium%20paid%20feature%20must%20be%20licenced%2C%20so%20in%20this%20example%2C%20all%20users%20that%20will%20be%20managed%20with%20conditional%20access%20require%20Azure%20AD%20Premium%20licences.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20makes%20it%20much%20clearer%20though%20like%20any%20licence%20topic%26nbsp%3Bits%20best%20to%20contact%20Microsoft%20directly%20or%20a%20partner%2C%20for%20example%2C%20to%20be%20certain%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%22%3CEM%3EAlthough%20obtaining%20a%20subscription%20is%20all%20you%20need%20to%20configure%20paid%20capabilities%2C%20you%20must%20still%20assign%20user%20licenses%20for%20paid%20Azure%20AD%20paid%20features.%20Any%20user%20who%20should%20have%20access%20to%2C%20or%20who%20%3C%2FEM%3Eis%3CEM%3E%20managed%20through%2C%20an%20Azure%20AD%20paid%20feature%20must%20be%20assigned%20a%20license.%20License%20assignment%20is%20a%20mapping%20between%20a%20user%20and%20a%20purchased%20service%2C%20such%20as%20Azure%20AD%20Premium%2C%20Basic%2C%20or%20Enterprise%20Mobility%20%2B%20Security.%3C%2FEM%3E%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Ffundamentals%2Flicense-users-groups%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3EQuickstart%3A%20License%20users%20in%20Azure%20Active%20Directory%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Jason Gaffney
Occasional Contributor

Hello,

Hope this is the correct forum.

I would like to restrict access to our O365 webapps to a single IP. I have successfully tested this with conditional access which requires an Azure Active Directory Premium license.

 

My question is how many Azure Active Directory Premium license are required?

I currently have a single license, which allows me to use conditional access and functions for all users.

 

Legally, is it required to license all users accounts, only the accounts that I want conditional access to apply, or is a single license enough?

 

Thank you.

 

1 Reply

As I understand it, all users that are managed with an Azure AD Premium paid feature must be licenced, so in this example, all users that will be managed with conditional access require Azure AD Premium licences.

 

This makes it much clearer though like any licence topic its best to contact Microsoft directly or a partner, for example, to be certain:

 

"Although obtaining a subscription is all you need to configure paid capabilities, you must still assign user licenses for paid Azure AD paid features. Any user who should have access to, or who is managed through, an Azure AD paid feature must be assigned a license. License assignment is a mapping between a user and a purchased service, such as Azure AD Premium, Basic, or Enterprise Mobility + Security."

 

Quickstart: License users in Azure Active Directory

Related Conversations
Extentions Synchronization
Deleted in Discussions on
3 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
38 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies