Entitlement Management Licence Requirement

Question

question

PT-8828 asked Mar 25, '20 PT-8828 commented Mar 27, '20

Entitlement Management Licence Requirement

If an access package is created and assigned to users without being made available for requests is there a licence requirement? The only mention of licences in the MS doc below is as follows;

"Using this feature requires and Azure AD Premium P2 license" for the following tasks;

Member users who can request an access package.
Member and guest users who request an access package.
Member and guest users who approve requests for an access package.

https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-overview#license-requirements

As the packages will not be requested, is the P2 still a requirement?

azure-active-directory

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2020-03-26T23:43:04.333Z

MarileeTurscak-MSFT answered Mar 26, '20 MarileeTurscak-MSFT edited Mar 26, '20

It's still a feature of entitlement management, which requires a P2 License or an Enterprise Mobility + Security E5 License. I tested in my own tenants and noticed that it only worked on the tenant where I had a P2 license applied. https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-first

Prerequisites
To use Azure AD entitlement management, you must have one of the following licenses:

Azure AD Premium P2
Enterprise Mobility + Security (EMS) E5 license

I agree that the documentation can be clearer though, as the only prerequisite listed for access package assignment is having the right admin role. I will get the docs updated this week and update this thread once that is done.
https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-assignments

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2020-03-26T23:58:08.383Z

MarileeTurscak-MSFT answered Mar 26, '20 PT-8828 commented Mar 27, '20

I made a pull request to update the documentation. Looks like for the other tasks you need a license for each user that performs it, but for access package assignment in general it seems that you just need the one P2 license on the tenant.

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

PT-8828 · Mar 27, 2020 at 09:38 AM

Thanks Marilee,
So does that mean a P2 licence is required in the tenant to activate the feature but if a package is assigned to a user and not available for requests the user assigned the package is not utilising the feature? The account assigning the package is and should have appropriate licences?

0 ·

question