Microsoft Enables Group-Based Azure AD Licensing

Organizations can now license Azure Active Directory by group, Microsoft announced Friday.

The capability is now generally available, meaning Microsoft deems Azure AD group licensing assignment as being ready for production use by organizations.

Group assignment is perhaps a less tedious approach for organizations with lots of Azure AD end users to manage. Previously, IT pros could only assign Azure AD licenses individually, and if they wanted to then associate those licenses with certain groups within the organization, then they'd have to use PowerShell scripts, according to Microsoft's general document on Azure AD group-based licensing.

Microsoft's group-based licensing for Azure AD automates this process without using PowerShell scripts, per the document:

Any new members who join the group are assigned the appropriate licenses. When they leave the group, those licenses are removed. This eliminates the need for automating license management via PowerShell to reflect changes in the organization and departmental structure on a per-user basis.

Microsoft's document suggested that organizations won't get double-licensed with the Azure AD group licensing approach.

"If a user is assigned same license from multiple sources, the license will be consumed only once," the document explained.

Right now, one requirement for using this feature is that the groups must be assigned using the Azure Portal. Here's how Microsoft described it:

Group-based licensing is currently available only through the Azure portal. If you primarily use other management portals for user and group management, such as the Office 365 portal, you can continue to do so. But you should use the Azure portal to manage licenses at group level.

The steps to take when using the Azure Portal to assign group licensing are described in this Microsoft document.

It's possible to disable particular services when assigning a license to a group, which might be done if an organization isn't ready to use that service. Microsoft's example is disabling Yammer. It gets done using a toggle button.

The new group licensing assignment capability is available for organizations that have a paid or trial subscription to Azure AD Basic, Office 365 Enterprise E3, Office 365 A3 or higher subscription plans, and it'll work with other Microsoft services that have "user-level licensing." It can also be used when organizations have their local Active Directory synchronized with Azure AD via Microsoft's Azure AD Connect service.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.


  • The 2021 Microsoft Product Roadmap

    From Windows 10X to the next generation of Microsoft's application server products, here are the product milestones coming down the pipeline in 2021.

  • The Future of Windows Server Includes Less Frequent Updates

    Microsoft is ending its practice of issuing semiannual channel updates for most Window Server editions, turning instead to long-term servicing channel updates.

  • Notebook

    Microsoft Bolsters Dynamics 365 with Suplari Acquisition

    An acquisition announced by Microsoft on Wednesday promises to bring AI solutions for assessing supply-chain spending to the Dynamics 365 product.

  • Microsoft Announces Positive Q4 Revenue Results of $46.2B

    Microsoft on Tuesday reported $46.2 billion in total revenue during its fiscal-year 2021 Q4 period, up 21% from the same quarter last year.