We have all users given M365 E3 license by default. Then some users have manually been upgraded to M365 E5.
We want to create a dynamic group that include users with selected roles, that get applied the license EMS+ E5 on top of existing license. However, we are worried about those users already having M365 E5 will then have to pay for both M365 E5 and EMS + E5.
1. Is there an automatic check in Azure AD that avoid users having to pay for more licenses than needed?
2. M365 E3 and EMS+E5 are two licenses that can be combined, to access P2 and identity protection for the selected users, right?
1. Is there an automatic check in Azure AD that avoid users having to pay for more licenses than needed? => AFAIK, There is no automatic check to verify that your user will not be granted two bundles. However, a very simple solution could be to update your dynamic group to include only the user with ME3 bundles.