Forum Discussion
Office 365 Cloud App Security Licensing
Who needs to be licensed for Microsoft Cloud App Security?
Each user must be licensed for Microsoft Cloud App Security to use or benefit from it. For customers who license a subset of users, services enforced at the tenant level are not licensed for the other users. They are not entitled to use or benefit from the service, regardless of whether the service is technically accessible. To be compliant, customers must license any user that they intend to benefit from the service.
More info: https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE2NXYO
Yes, you can un-assign (disable) the license app (service) if the app is not assigned at the organization level. For Cloud App Security Licensing, this is user level license, so you can disable for some users and keep the app for other users.
Refer the below post if you looking for the Powershell script.
https://docs.microsoft.com/en-us/microsoft-365/enterprise/disable-access-to-services-with-microsoft-365-powershell?view=o365-worldwide
This is great! Thank you. But one thing confuses me. The Cloud App Security is only on for 5 users - they also have an E5 plan, but yet in the Security center I also see events from users with E1 or E3 plans. Why?
I believe, the license is to restrict or allow admin users from accessing Cloud App Security admin portal. Once your tenant got a license which includes the component Cloud App Security, security alert and events will be automatically logged for all users. Hope to detect threats, we do not need a user-level license.