將 Intune 授權指派給您的使用者帳戶Assign Intune licenses to your user accounts

適用於︰IntuneApplies to: Intune
本主題適用於 Azure 入口網站和傳統主控台中的 Intune。This topic applies to Intune in both the Azure portal and the classic console.

無論您手動新增使用者,或是從內部部署 Active Directory 同步處理,您必須先指派 Intune 授權給每位使用者,使用者才能在 Intune 中註冊他們的裝置。Whether you manually add users or synchronize from your on-premises Active Directory, you must first assign each user an Intune license before users can enroll their devices in Intune.

在 Office 365 系統管理中心指派 Intune 授權Assign an Intune license in the Office 365 Admin center

您可以使用 Office 365 入口網站手動新增雲端式使用者,並將授權指派給雲端式使用者帳戶,以及從您的內部部署 Active Directory 同步處理至 Azure AD 的帳戶。You can use the Office 365 portal to manually add cloud-based users and assign licenses to both cloud-based user accounts and accounts synchronized from your on-premises Active Directory to Azure AD.

  1. 使用租用戶系統管理員認證登入 Office 365 入口網站,然後選擇 [使用者] > [作用中使用者]。Sign in to the Office 365 portal using your tenant administrator credentials, and then choose Users > Active Users.

  2. 選取您想要指派 Intune 使用者授權的使用者帳戶,然後選擇 [產品授權] > [編輯]。Select the user account that you want to assign an Intune user license to, and then choose Product licenses > Edit.

  3. 將 [Intune] 或 [Enterprise Mobility + Security] 切換為 [開啟],然後選擇 [儲存]。Toggle Intune or Enterprise Mobility + Security to On, and choose Save.

    Office 365 入口網站指派產品授權的影像。

  4. 使用者帳戶現在已有使用服務並將裝置註冊接受管理所需的權限。The user account now has the permissions needed to use the service and enroll devices into management.

注意

使用者必須先註冊裝置,才會顯示在管理主控台中。Users will appear in the Admin console only after they have enrolled a device. 此外,您可以一次選取一組使用者來編輯,可以選取以新增或取代所有選取使用者的授權。Also, you can select a group of users to edit at once, either selecting to add or replace a license for all selected users.

使用「學校資料同步處理」將授權指派給 Intune 教育版中的使用者Use School Data Sync to assign licenses to users in Intune for Education

如果您是教育組織,則可以使用「學校資料同步處理」(SDS) 將 Intune 教育版授權指派給同步的使用者。If you are an educational organization, you can use School Data Sync (SDS) to assign Intune for Education licenses to synced users. 只要在設定 SDS 設定檔時,選取 [Intune 教育版] 核取方塊即可。Just choose the Intune for Education checkbox when you're setting up your SDS profile.

SDS 設定檔設定的影像

當您指派 Intune 教育版授權時,請務必一併指派 Intune A Direct 授權。When you assign an Intune for Education license, make sure that Intune A Direct license is also assigned.

產品授權設定的影像

若要深入了解 SDS,請參閱此學校資料同步處理概觀See this overview of School Data Sync to learn more about SDS.

使用者和裝置授權如何影響對服務的存取How user and device licenses affect access to services

  • 您指派軟體授權的每個使用者,都可以存取及使用線上服務和相關軟體 (包括 System Center 軟體),以管理應用程式和最多 15 個裝置。Each user that you assign a user software license to may access and use the online services and related software (including System Center software) to manage applications and up to 15 devices.
  • 您指派裝置軟體授權的每個裝置,都可以存取及使用線上服務和相關軟體 (包括 System Center 軟體),以供任何數目的使用者使用。Each device that you assign a device software license to may access and use the online services and related software (including System Center software) for use by any number of users.
  • 如果裝置是由多個使用者使用,每個使用者都需要一個裝置軟體授權,或者所有使用者需要一個使用者軟體授權。If a device is used by more than one user, each requires a device software license or all users require a user software license.

使用 PowerShell 來選擇性地管理 EMS 使用者授權Use PowerShell to selectively manage EMS user licenses

使用 Microsoft Enterprise Mobility + Security (原稱為 Enterprise Mobility Suite) 的組織可能會有一些使用者只需要使用 EMS 套件中的 Azure Active Directory Premium 或 Intune 服務。Organizations that use Microsoft Enterprise Mobility + Security (formerly Enterprise Mobility Suite) might have users who only require Azure Active Directory Premium or Intune services in the EMS package. 您可以使用 Azure Active Directory PowerShell Cmdlet 指派一項服務或其中一部分的服務。You can assign one or a subset of services using Azure Active Directory PowerShell cmdlets.

若要選擇性地指派 EMS 服務的使用者授權,請在已安裝適用於 Windows PowerShell 的 Windows Azure Active Directory 模組的電腦上,以系統管理員身分開啟 PowerShell。To selectively assign user licenses for EMS services, open PowerShell as an administrator on a computer with the Azure Active Directory Module for Windows PowerShell installed. 您可以在本機電腦或 ADFS 伺服器上安裝 PowerShell。You can install PowerShell on a local computer or on an ADFS server.

您必須建立只適用於所需服務方案的新授權 SKU 定義。You must create a new license SKU definition that applies only to the desired service plans. 若要這樣做,請停用您不想要套用的方案。To do this, disable the plans you don’t want to apply. 例如,您可能建立不指派 Intune 授權的授權 SKU 定義。For example, you might create a license SKU definition that does not assign an Intune license. 若要查看可用的服務清單,請輸入︰To see a list of available services, type:

(Get-MsolAccountSku | Where {$_.SkuPartNumber -eq "EMS"}).ServiceStatus

您可以執行下列命令,以排除 Intune 服務方案。You can run the following command to exclude the Intune service plan. 您可以使用相同的方法以擴充到整個安全性群組,也可以使用更細微的篩選器。You can use the same method to expand to an entire security group or you can use more granular filters.

範例 1Example 1
在命令列上建立新的使用者,並指派 EMS 授權,而不啟用授權的 Intune 部分︰Create a new user on the command line and assign an EMS license without enabling the Intune portion of the license:

Connect-MsolService

New-MsolUser -DisplayName “Test User” -FirstName FName -LastName LName -UserPrincipalName user@<TenantName>.onmicrosoft.com –Department DName -UsageLocation US

$CustomEMS = New-MsolLicenseOptions -AccountSkuId "<TenantName>:EMS" -DisabledPlans INTUNE_A
Set-MsolUserLicense -UserPrincipalName user@<TenantName>.onmicrosoft.com -AddLicenses <TenantName>:EMS -LicenseOptions $CustomEMS

驗證:Verify with:

(Get-MsolUser -UserPrincipalName "user@<TenantName>.onmicrosoft.com").Licenses.ServiceStatus

範例 2Example 2
對於已獲指派授權的使用者,停用 EMS 授權的 Intune 部分︰Disable the Intune portion of EMS license for a user that is already assigned with a license:

Connect-MsolService

$CustomEMS = New-MsolLicenseOptions -AccountSkuId "<TenantName>:EMS" -DisabledPlans INTUNE_A
Set-MsolUserLicense -UserPrincipalName user@<TenantName>.onmicrosoft.com -LicenseOptions $CustomEMS

驗證:Verify with:

(Get-MsolUser -UserPrincipalName "user@<TenantName>.onmicrosoft.com").Licenses.ServiceStatus

PoSH-AddLic-Verify

若要提交意見反應,請前往 Intune Feedback