question

PT-8828 avatar image
PT-8828 asked ·

Entitlement Management Licence Requirement

If an access package is created and assigned to users without being made available for requests is there a licence requirement? The only mention of licences in the MS doc below is as follows;

"Using this feature requires and Azure AD Premium P2 license" for the following tasks;

Member users who can request an access package.
Member and guest users who request an access package.
Member and guest users who approve requests for an access package.

https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-overview#license-requirements


As the packages will not be requested, is the P2 still a requirement?


azure-active-directory
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

2 Answers

MarileeTurscak avatar image
MarileeTurscak answered ·

It's still a feature of entitlement management, which requires a P2 License or an Enterprise Mobility + Security E5 License. I tested in my own tenants and noticed that it only worked on the tenant where I had a P2 license applied. https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-first

Prerequisites
To use Azure AD entitlement management, you must have one of the following licenses:

Azure AD Premium P2
Enterprise Mobility + Security (EMS) E5 license

I agree that the documentation can be clearer though, as the only prerequisite listed for access package assignment is having the right admin role. I will get the docs updated this week and update this thread once that is done.
https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-assignments

Share
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MarileeTurscak avatar image
MarileeTurscak answered ·

I made a pull request to update the documentation. Looks like for the other tasks you need a license for each user that performs it, but for access package assignment in general it seems that you just need the one P2 license on the tenant.

1 comment Share
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

PT-8828 avatar image PT-8828 ·

Thanks Marilee,
So does that mean a P2 licence is required in the tenant to activate the feature but if a package is assigned to a user and not available for requests the user assigned the package is not utilising the feature? The account assigning the package is and should have appropriate licences?

0 Votes 0 · ·