question

martinta avatar image
0 Votes"
martinta asked martinta commented

Required licenses for admin and Conditional access

Hi

So this is more of a license question that technical.

What are the license requirement for admin users holding a role in Azure AD when using conditional access? All users needs a P1/P2 license to be allowed to use the conditional access policies, but are the requirement the same for admin accounts?

If i recall right, they are exempt from this if they are only used as admin accounts, but can't find anything official to confirm or deny this.

Hope someone can bring some clarity on this subject.

Kind Regards
Martin

azure-ad-licensing
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

MarileeTurscak-MSFT avatar image
0 Votes"
MarileeTurscak-MSFT answered martinta commented

Hi @martinta,


The Licensing Requirements guide says that the license is required for every user who is making use of the service:

For the purposes of this article, a tenant-level service is an online service that—when purchased for any user in the tenant (standalone or as part of Office 365 or Microsoft 365 plans)—is activated in part or in full for all users in the tenant. Although some unlicensed users may technically be able to access the service, a license is required for any user that you intend to benefit from the service.

So if the policies are applied to the admins then it would still be a requirement.

You can also reach out to your licensing/billing representative for questions about specific requirements: https://azure.microsoft.com/en-us/support/options/



If this answer is helpful to you, please remember to "mark as answer" so that members of the community with similar questions can more easily find a solution.



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for the reply.

Earlier (and still, using microsoft security baseline) there where some options for role owners to have enabled MFA, however, these will usually be moved to conditional access today (and thus, require a license).

0 Votes 0 ·