Forum Discussion
Microsoft ATP missing in CAS settings
sure, I’m global admin.
- PeterRisingMay 04, 2020MVP
That is pretty annoying that you have to wait until July 1st to find out. Licensing is always such a minefield.
- MCJM1May 04, 2020Copper Contributor
PeterRising According to our license-specialist OCAS-licenses are retired per Februari 1st and all users should upgrade to MCAS as soon as their subscription end:
How are existing Office 365 Cloud App Security customers impacted
On February 1, 2019, the Office 365 Cloud App Security USL standalone SKU was retired, and new customer subscriptions will no longer be available as a standalone. Office 365 CAS will continue to be included with Office 365 E5 and Microsoft Cloud App Security.
Existing customers will see no changes for the remainder of their current enrollment term and may continue to add new Office 365 Cloud App Security standalone USLs.
Customers with enrollments expiring on or before June 30, 2019 will have the option to renew Office 365 Cloud App Security standalone for one more term.
Customers with Office 365 Cloud App Security standalone enrollments expiring after June 30, 2019, will need to move to Microsoft Cloud App Security at renewal to maintain the service
In the meantime nothing should change in an existing environment. Apparently we now have a mixed environment: partly MCAS but with the limitations of OCAS. They couldn't tell me whether this is correct. Our subscription ends on July 1st, so after date we will have MCAS-licenses. I hope everything will then work as expected.
- PeterRisingApr 23, 2020MVP
Licensing is such a minefield. There really are too many different ways to get CAS and it's really difficult keeping up. Hope you manage to get somewhere with this but it sounds like you are on the right track!
- MCJM1Apr 23, 2020Copper Contributor
Things are getting clearer: We have EMS E3, O365 E3 and Office365 Cloud App Security licenses. So it seems to be correct that we're using OCAS. But still: Microsoft ATP is integrated in our OCAS, so it should be possible to block apps. I will contact our license-supplier to check what to expect with the licenses they sold us:-)
- PeterRisingApr 23, 2020MVP
This confirms it. EM+S E3 plus standalone CAS gets you the full MCAS features and not just the subset that comes with OCAS.
https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE2NXYO
- PeterRisingApr 23, 2020MVP
Yeah, unless i'm missing something very obvious, the CAS add-on is only available as MCAS as shown below;
So if it is this add-on that you have, then MCAS is what you should be getting, not OCAS
- PeterRisingApr 23, 2020MVP
Yes there are indeed two flavours of CAS which are MCAS and OCAS. OCAS comes with O365 E5, and MCAS comes with EM+S E5, and to the best of my knowledge it also comes with the licensing that you have of EM+S E3 with the CAS add-on.
To prove this theory, I recommend you see if you can get an EM+S E5 trial and apply it to your GA account. See if that makes a difference maybe?
- MCJM1Apr 23, 2020Copper Contributor
Hi peter, I already tried that, but it didn't work. But in searching for a solution I noticed something: there are two versions of CAS: "Microsoft Cloud App Security" and "Office365 Cloud App Security". We are using the latter:
But based on our licenses we are entitled for MCAS. I now investigating how we can "upgrade" to Microsoft Cloud App Security.
Maybe that will solve the issue.
- PeterRisingApr 23, 2020MVP
One other thought - have you tried logging in with a different Global Admin account? I recently had an issue where some of the options in O365 ATP disappeared for me in the Security and Compliance Center. I logged in with another GA account and they were all there. Not long afterwards, they randomly reappeared in my own GA account.