SOLVED

License guide or infographic

%3CLINGO-SUB%20id%3D%22lingo-sub-236232%22%20slang%3D%22en-US%22%3ELicense%20guide%20or%20infographic%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-236232%22%20slang%3D%22en-US%22%3E%3CP%3EAre%20there%20any%20license%20resource%2Fguides%2FQ%26amp%3BA%20available%20that%20gives%20on%20%22overview%22%20about%20the%20various%20licensing%20in%20O365%2FAzure%3F.%3CBR%20%2F%3EExample%3A%3CBR%20%2F%3EQ%3A%20I%20want%20to%20do%20'Conditional%20Access'%20for%2050%20out%20of%205000%20users%3CBR%20%2F%3E%3CBR%20%2F%3EA%3A%20OK%20-%20you%20need%20a%20Azure%20P1%20license%2Fsubscription%20-%20and%20you'll%20have%20to%20license%3CSTRONG%3E%20all%3C%2FSTRONG%3E%20your%205000%20users%20-%20not%20just%20the%2050%26nbsp%3B%20%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-236232%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECompliance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-236878%22%20slang%3D%22en-US%22%3ERe%3A%20License%20guide%20or%20infographic%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-236878%22%20slang%3D%22en-US%22%3E%3CP%3EThere%20is%20some%20sort%20of%20joke%20about%20vigilante%20justice%20in%20here%20%3B)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-236859%22%20slang%3D%22en-US%22%3ERe%3A%20License%20guide%20or%20infographic%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-236859%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F603%22%20target%3D%22_blank%22%3E%40Adam%20Ochs%3C%2FA%3E%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3EThanks%20%3A)%3C%2Fimg%3E%3CBR%20%2F%3E%3CBR%20%2F%3ESo%20I'll%20buy%20a%20single%20license%20for%20now%20-%20then%20doing%20the%20conditional%20access%20policy%20-%20and%20see%20whats%20%22coming%22%20audit%20wise%26nbsp%3B%20-%20and%20maybe%20I'm%20violating%20the%20license%20rules%20..%20but%20what%20the%20heck%2C%20MS%20needs%20to%20be%20more%20%22transparent%22%20in%20their%20licensing%20%3AD%3C%2Fimg%3E%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%20again%20%3A)%3C%2Fimg%3E%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-236839%22%20slang%3D%22en-US%22%3ERe%3A%20License%20guide%20or%20infographic%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-236839%22%20slang%3D%22en-US%22%3E%3CP%3ESo%20I%20just%20got%20done%20testing%20this%20out.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1st%20-%20Turns%20out%20enabling%20the%20conditional%20access%20policy%20helps....%20i%20was%20sitting%20there%20for%20like%20an%20hour%20like%20why%20the%20heck%20is%20this%20not%20working....%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EAnyways%2C%3CBR%20%2F%3E%3CBR%20%2F%3EI%20have%20a%20user%20with%20e3%2C%20as%20well%20as%20another%20with%20e5.%20The%20e5%20user%20obviously%20has%20the%20appropriate%20AADP%20licensing%20to%20do%20conditional%20access%20and%20the%20e3%20does%20not.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20created%20a%20conditional%20access%20policy%20for%20SPO%20and%20set%20MFA%20as%20a%20prereq%20fro%20both%20users.%20After%20a%20bit%2C%20I%20tested%2C%20and%20it%20enforced%20the%20MFA%20on%20both%20of%20them.%3CBR%20%2F%3E%3CBR%20%2F%3ESo%20even%20my%20user%20with%20just%20e3%2C%20and%20lacking%20the%20appropriate%20AADP%20license%2C%20still%20had%20conditional%20access%20enforced.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20would%20think%20think%20this%20would%20be%20how%20you%20can%20expect%20your%20tenant%20to%20act%20right%20now%2C%20but%20honestly%20I%20am%20unsure%20if%20that%20is%20intentional%20or%20not.%20It%20seems%20like%20a%20problem%20with%20auditing%20more%20than%20anything.%20So%20for%20now%2C%20I%20would%20say%20you%20are%20in%20the%20clear%2C%20but%20It%20would%20not%20surprise%20me%20if%20they%20set%20auditing%20better%20in%20the%20future%20and%20forced%20you%20to%20have%20AADP%20for%20CA%20to%20work.%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-236798%22%20slang%3D%22en-US%22%3ERe%3A%20License%20guide%20or%20infographic%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-236798%22%20slang%3D%22en-US%22%3E%3CP%3EHey%20%40Deleted%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can%20test%20this%20in%20my%20lab%20for%20your%20today%2C%20I%20will%20try%20to%20get%20back%20to%20you%20before%20the%20weekend!%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAdam%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-236594%22%20slang%3D%22en-US%22%3ERe%3A%20License%20guide%20or%20infographic%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-236594%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F603%22%20target%3D%22_blank%22%3E%40Adam%20Ochs%3C%2FA%3E%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EThanks!%20-%26nbsp%3B%3CEM%3E%22It's%20not%20who%20we%20are%20but%20what%20we%20do%20that%20defines%20us.%22%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EVery%20useful%20link%2C%20but%20seeking%20more%20in%20the%20%22admin%22%20part%20-%26nbsp%3Bits%20a%20%22big%20dark%20(knight)%20jungle%22%20-%20when%20it%20comes%20to%20licensing%20%3A)%3C%2Fimg%3E%26nbsp%3B%20%26nbsp%3B%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CBR%20%2F%3E%3CBR%20%2F%3EThere%20are%20various%20%22rumors%2Fstatements%22%20floating%20around%20like%3B%20%22You%20only%20need%20one%20Azure%20P1%20license%20for%20the%20Global%20Admin%20in%20order%20to%20achieve%20%22this%20and%20that%22.....%22%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%3CBR%20%2F%3Eand%20like%20this%20from%20a%20MS%20page%3A%3A%26nbsp%3B%3CBR%20%2F%3E%3CEM%3E%3CSTRONG%3E%22The%20administrator%20who%20configures%20the%20settings%2C%20and%20the%20members%20of%20the%20affected%20groups%2C%20must%20have%20Azure%20AD%20Premium%26nbsp%3Blicenses%20assigned%20to%20them%22%3C%2FSTRONG%3E%3C%2FEM%3E%26nbsp%3B%3CBR%20%2F%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%20class%3D%22quoteBody%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3E%3CSPAN%3EIn%20the%20above%20scenario%20I%20clearly%20don't%20need%20to%20assign%2Fbuy%20a%20Azure%20P1%20license%20for%20all%205000%20users%20(if%20they%20are%20not%20all%20in%20the%20groups%20%3A)...%20)%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EDoes%20the%20same%20apply%20for%20conditional%20access%3F%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CBR%20%2F%3E%26nbsp%3B%20%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-236428%22%20slang%3D%22en-US%22%3ERe%3A%20License%20guide%20or%20infographic%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-236428%22%20slang%3D%22en-US%22%3E%3CP%3EHello%26nbsp%3B%40Deleted%26nbsp%3B(amazing)%2C%3CBR%20%2F%3E%3CBR%20%2F%3EI%20am%20not%20sure%20if%20there%20is%20something%20as%20granular%2Fspecific%20as%20what%20you%20are%20looking%20for%2C%20but%20this%20is%20my%20holy%20grail%20when%20it%20comes%20to%20O365%20licensing%20info%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechnet.microsoft.com%2Flibrary%2Foffice-365-service-descriptions.aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftechnet.microsoft.com%2Flibrary%2Foffice-365-service-descriptions.aspx%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EThe%20service%20description%20file%20can%20be%20spliced%20every%20which%20way%20with%20the%20pivot%20tables%20at%20the%20top.%20It%20wont%20get%20a%20specific%20as%20your%20example%20%22you%20need%20all%20users%20licensed%20for%20this.%22%20But%20you%20could%20100%25%20find%20out%20what%20licenses%20have%20what%20features%2C%20etc.%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20this%20helps%20somewhat!%3C%2FP%3E%3CP%3EAdam%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Deleted
Not applicable

Are there any license resource/guides/Q&A available that gives on "overview" about the various licensing in O365/Azure?.
Example:
Q: I want to do 'Conditional Access' for 50 out of 5000 users

A: OK - you need a Azure P1 license/subscription - and you'll have to license all your 5000 users - not just the 50   

6 Replies
Highlighted

Hello @Deleted (amazing),

I am not sure if there is something as granular/specific as what you are looking for, but this is my holy grail when it comes to O365 licensing info - https://technet.microsoft.com/library/office-365-service-descriptions.aspx

The service description file can be spliced every which way with the pivot tables at the top. It wont get a specific as your example "you need all users licensed for this." But you could 100% find out what licenses have what features, etc.

Hope this helps somewhat!

Adam

Highlighted

Hi @Adam Ochs 

Thanks! - "It's not who we are but what we do that defines us."

 

Very useful link, but seeking more in the "admin" part - its a "big dark (knight) jungle" - when it comes to licensing :)    

There are various "rumors/statements" floating around like; "You only need one Azure P1 license for the Global Admin in order to achieve "this and that"....."  


and like this from a MS page:: 
"The administrator who configures the settings, and the members of the affected groups, must have Azure AD Premium licenses assigned to them" 

 

 

In the above scenario I clearly don't need to assign/buy a Azure P1 license for all 5000 users (if they are not all in the groups :)... ) 

Does the same apply for conditional access? 


    

Highlighted

Hey @Deleted,

 

I can test this in my lab for your today, I will try to get back to you before the weekend! 

 

Adam

Highlighted
Best Response
Solution

So I just got done testing this out.

 

1st - Turns out enabling the conditional access policy helps.... i was sitting there for like an hour like why the heck is this not working....


Anyways,

I have a user with e3, as well as another with e5. The e5 user obviously has the appropriate AADP licensing to do conditional access and the e3 does not.

I created a conditional access policy for SPO and set MFA as a prereq fro both users. After a bit, I tested, and it enforced the MFA on both of them.

So even my user with just e3, and lacking the appropriate AADP license, still had conditional access enforced.

I would think think this would be how you can expect your tenant to act right now, but honestly I am unsure if that is intentional or not. It seems like a problem with auditing more than anything. So for now, I would say you are in the clear, but It would not surprise me if they set auditing better in the future and forced you to have AADP for CA to work.

Adam

Highlighted

Hi @Adam Ochs 

Thanks :)

So I'll buy a single license for now - then doing the conditional access policy - and see whats "coming" audit wise  - and maybe I'm violating the license rules .. but what the heck, MS needs to be more "transparent" in their licensing :D 

Thanks again :)  

Highlighted

There is some sort of joke about vigilante justice in here ;)