Conditional Access / Azure Premium licensing

%3CLINGO-SUB%20id%3D%22lingo-sub-222698%22%20slang%3D%22en-US%22%3EConditional%20Access%20%2F%20Azure%20Premium%20licensing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-222698%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3EHope%20this%20is%20the%20correct%20forum.%3C%2FP%3E%3CP%3EI%20would%20like%20to%20restrict%20access%20to%20our%20O365%20webapps%20to%20a%20single%20IP.%20I%20have%20successfully%20tested%20this%20with%20conditional%20access%20which%20requires%20an%20Azure%20Active%20Directory%20Premium%20license.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20question%20is%20how%20many%20Azure%20Active%20Directory%20Premium%20license%20are%20required%3F%3C%2FP%3E%3CP%3EI%20currently%20have%20a%20single%20license%2C%20which%20allows%20me%20to%20use%20conditional%20access%20and%20functions%20for%20all%20users.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELegally%2C%20is%20it%20required%20to%20license%20all%20users%20accounts%2C%20only%20the%20accounts%20that%20I%20want%20conditional%20access%20to%20apply%2C%20or%20is%20a%20single%20license%20enough%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-222698%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-222741%22%20slang%3D%22en-US%22%3ERe%3A%20Conditional%20Access%20%2F%20Azure%20Premium%20licensing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-222741%22%20slang%3D%22en-US%22%3E%3CP%3EAs%20I%20understand%20it%2C%20all%20users%20that%20are%20managed%20with%20an%20Azure%20AD%20Premium%20paid%20feature%20must%20be%20licenced%2C%20so%20in%20this%20example%2C%20all%20users%20that%20will%20be%20managed%20with%20conditional%20access%20require%20Azure%20AD%20Premium%20licences.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20makes%20it%20much%20clearer%20though%20like%20any%20licence%20topic%26nbsp%3Bits%20best%20to%20contact%20Microsoft%20directly%20or%20a%20partner%2C%20for%20example%2C%20to%20be%20certain%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%22%3CEM%3EAlthough%20obtaining%20a%20subscription%20is%20all%20you%20need%20to%20configure%20paid%20capabilities%2C%20you%20must%20still%20assign%20user%20licenses%20for%20paid%20Azure%20AD%20paid%20features.%20Any%20user%20who%20should%20have%20access%20to%2C%20or%20who%20%3C%2FEM%3Eis%3CEM%3E%20managed%20through%2C%20an%20Azure%20AD%20paid%20feature%20must%20be%20assigned%20a%20license.%20License%20assignment%20is%20a%20mapping%20between%20a%20user%20and%20a%20purchased%20service%2C%20such%20as%20Azure%20AD%20Premium%2C%20Basic%2C%20or%20Enterprise%20Mobility%20%2B%20Security.%3C%2FEM%3E%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Ffundamentals%2Flicense-users-groups%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3EQuickstart%3A%20License%20users%20in%20Azure%20Active%20Directory%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hello,

Hope this is the correct forum.

I would like to restrict access to our O365 webapps to a single IP. I have successfully tested this with conditional access which requires an Azure Active Directory Premium license.

 

My question is how many Azure Active Directory Premium license are required?

I currently have a single license, which allows me to use conditional access and functions for all users.

 

Legally, is it required to license all users accounts, only the accounts that I want conditional access to apply, or is a single license enough?

 

Thank you.

 

1 Reply
Highlighted

As I understand it, all users that are managed with an Azure AD Premium paid feature must be licenced, so in this example, all users that will be managed with conditional access require Azure AD Premium licences.

 

This makes it much clearer though like any licence topic its best to contact Microsoft directly or a partner, for example, to be certain:

 

"Although obtaining a subscription is all you need to configure paid capabilities, you must still assign user licenses for paid Azure AD paid features. Any user who should have access to, or who is managed through, an Azure AD paid feature must be assigned a license. License assignment is a mapping between a user and a purchased service, such as Azure AD Premium, Basic, or Enterprise Mobility + Security."

 

Quickstart: License users in Azure Active Directory