Microsoft 雲端供應項目的訂用帳戶、授權、帳戶及租用戶

Subscriptions, licenses, accounts, and tenants for Microsoft's cloud offerings

Microsoft 提供組織、訂閱、授權、使用者帳戶的階層,讓所有雲端產品都能使用一致的身分識別和計費方式:Microsoft provides a hierarchy of organizations, subscriptions, licenses, and user accounts for consistent use of identities and billing across its cloud offerings:

  • Microsoft 365 和 Microsoft Office 365Microsoft 365 and Microsoft Office 365
  • Microsoft AzureMicrosoft Azure
  • Microsoft Dynamics 365Microsoft Dynamics 365

階層的元素Elements of the hierarchy

以下是階層的元素:Here are the elements of the hierarchy:

組織Organization

組織代表正在使用 Microsoft 雲端供應項目的商業實體,通常是用一個或多個公用網域名稱 (DNS),例如 contoso.com 加以識別。組織是訂用帳戶的容器。An organization represents a business entity that is using Microsoft cloud offerings, typically identified by one or more public Domain Name System (DNS) domain names, such as contoso.com. The organization is a container for subscriptions.

訂閱Subscriptions

訂閱是與 Microsoft 簽訂使用一或多個 Microsoft 雲端平台或服務的合約,其費用會根據每位使用者的授權費用或雲端資源使用量而產生。A subscription is an agreement with Microsoft to use one or more Microsoft cloud platforms or services, for which charges accrue based on either a per-user license fee or on cloud-based resource consumption.

  • Microsoft 的軟體即服務 (SaaS) 型雲端產品 (Microsoft 365 和 Dynamics 365) 是按照每個使用者授權來收費。Microsoft's Software as a Service (SaaS)-based cloud offerings (Microsoft 365 and Dynamics 365) charge per-user license fees.
  • Microsoft 的平台即服務 (PaaS) 和基礎結構即服務 (IaaS) 雲端供應項目 (Azure) 是根據雲端資源的使用量來收費。Microsoft's Platform as a Service (PaaS) and Infrastructure as a Service (IaaS) cloud offerings (Azure) charge based on cloud resource consumption.

您也可以使用試用版的訂用帳戶,但在使用特定一段時間或耗用量之後,訂用帳戶便到期。您可以將試用版訂用帳戶轉換為付費訂用帳戶。You can also use a trial subscription, but the subscription expires after a specific amount of time or consumption charges. You can convert a trial subscription to a paid subscription.

組織可有多個訂用帳戶,用於 Microsoft 的多個雲端供應項目。Organizations can have multiple subscriptions for Microsoft's cloud offerings. 圖 1 顯示單一組織擁有多個 Microsoft 365 訂閱、一個 Dynamics 365 訂閱和多個 Azure 訂閱。Figure 1 shows a single organization that has multiple Microsoft 365 subscriptions, a Dynamics 365 subscription, and multiple Azure subscriptions.

圖 1:組織的多個訂用帳戶範例Figure 1: Example of multiple subscriptions for an organization

具有多個 Microsoft 雲端供應項目訂用帳戶的組織範例。

授權Licenses

針對 Microsoft SaaS 雲端供應項目,授權可讓特定使用者帳戶使用雲端供應項目服務。For Microsoft's SaaS cloud offerings, a license allows a specific user account to use the services of the cloud offering. 會向您收取每月固定的訂閱費用。You are charged a fixed monthly fee as part of your subscription. 系統管理員會將授權指派給訂閱中的個別使用者帳戶。Administrators assign licenses to individual user accounts in the subscription. 如圖 2 所示範例,Contoso Corporation 擁有包含 100 個授權的 Microsoft 365 E5 訂閱,可讓最多 100 個個別使用者帳戶使用 Microsoft 365 E5 功能與服務。For the example in Figure 2, the Contoso Corporation has a Microsoft 365 E5 subscription with 100 licenses, which allows to up to 100 individual user accounts to use Microsoft 365 E5 features and services.

圖 2:SaaS 型訂用帳戶中的組織授權Figure 2: Licenses within the SaaS-based subscriptions for an organization

Microsoft SaaS 型雲端供應項目訂用帳戶中多個授權的範例。

使用 Azure PaaS 型雲端服務時,服務費用已包含軟體授權。For Azure PaaS-based cloud services, software licenses are built into the service pricing.

使用 Azure IaaS 型虛擬機器時,可能會需要額外的授權來使用安裝在虛擬機器映像上的軟體或應用程式。部分虛擬機器映像已安裝軟體的授權版本,費用是由伺服器的每一分鐘費率涵蓋。例如 SQL Server 2014 和 SQL Server 2016 的虛擬機器映像。For Azure IaaS-based virtual machines, additional licenses to use the software or application installed on a virtual machine image might be required. Some virtual machine images have licensed versions of software installed and the cost is included in the per-minute rate for the server. Examples are the virtual machine images for SQL Server 2014 and SQL Server 2016.

部分虛擬機器映像已安裝試用版應用程式,在試用期間過後需要額外的軟體應用程式授權。例如,SharePoint Server 2016 試用版的虛擬機器映像包含預先安裝的 SharePoint Server 2016 試用版。若要在試用到期日之後繼續使用 SharePoint Server 2016,您必須向 Microsoft 購買 SharePoint Server 2016 授權和用戶端授權。這些費用和 Azure 訂用帳戶是分開的,且仍需支付執行虛擬機器的每一分鐘費率。Some virtual machine images have trial versions of applications installed and need additional software application licenses for use beyond the trial period. For example, the SharePoint Server 2016 Trial virtual machine image includes a trial version of SharePoint Server 2016 pre-installed. To continue using SharePoint Server 2016 after the trial expiration date, you must purchase a SharePoint Server 2016 license and client licenses from Microsoft. These charges are separate from the Azure subscription and the per-minute rate to run the virtual machine still applies.

使用者帳戶User accounts

所有 Microsoft 雲端供應項目的使用者帳戶都儲存在 Azure Active Directory (Azure AD) 租用戶中,其中包含使用者帳戶和群組。User accounts for all of Microsoft's cloud offerings are stored in an Azure Active Directory (Azure AD) tenant, which contains user accounts and groups. Azure AD 租用戶可以使用 Azure AD Connect 這個 Windows 伺服器型服務,與您現有的 Active Directory 網域服務 (AD DS) 帳戶進行同步。An Azure AD tenant can be synchronized with your existing Active Directory Domain Services (AD DS) accounts using Azure AD Connect, a Windows server-based service. 這稱為目錄同步處理。This is known as directory synchronization.

圖 3 顯示組織的多個訂用帳戶使用同一個 Azure AD 租用戶,租用戶包含組織的帳戶。Figure 3 shows an example of multiple subscriptions of an organization using a common Azure AD tenant that contains the organization's accounts.

圖 3:組織的多個訂用帳戶使用相同 Azure AD 租用戶的範例。Figure 3: Multiple subscriptions of an organization that use the same Azure AD tenant

多個訂用帳戶皆使用相同 Azure AD 租用戶的組織範例。

租用戶Tenants

針對 SaaS 雲端產品,租用戶是指存放提供雲端服務之伺服器的區域位置。For SaaS cloud offerings, the tenant is the regional location that houses the servers providing cloud services. 例如,Contoso Corporation 選擇歐洲區域來裝載它的 Microsoft 365、EMS 和 Dynamics 365 租用戶,供巴黎總公司的 15,000 名員工使用。For example, the Contoso Corporation chose the European region to host its Microsoft 365, EMS, and Dynamics 365 tenants for the 15,000 workers in their Paris headquarters.

Azure PaaS 服務和虛擬機器的工作負載裝載於 Azure IaaS 中,可以將租用戶放在世界各地的 Azure 資料中心內。當您建立 Azure PaaS 應用程式或服務或 IaaS 工作負載的元素時,由您指定 Azure 資料中心 (稱為「位置」)。Azure PaaS services and virtual machine-based workloads hosted in Azure IaaS can have tenancy in any Azure datacenter across the world. You specify the Azure datacenter, known as the location, when you create the Azure PaaS app or service or element of an IaaS workload.

Azure AD 租用戶是包含帳戶和群組之 Azure AD 的特定執行個體。An Azure AD tenant is a specific instance of Azure AD containing accounts and groups. Microsoft 365 或 Dynamics 365 的付費或試用訂閱包括免費的 Azure AD 租用戶。Paid or trial subscriptions of Microsoft 365 or Dynamics 365 include a free Azure AD tenant. 這個 Azure AD 租用戶不包括其他 Azure 服務,和 Azure 試用或付費訂閱不同。This Azure AD tenant does not include other Azure services and is not the same as an Azure trial or paid subscription.

階層摘要Summary of the hierarchy

以下是重點複習:Here is a quick recap:

  • 組織可以有多個訂用帳戶。An organization can have multiple subscriptions

    • 訂用帳戶可以有多個授權。A subscription can have multiple licenses

    • 授權可以指派給個別使用者帳戶。Licenses can be assigned to individual user accounts

    • 使用者帳戶儲存在 Azure AD 租用戶。User accounts are stored in an Azure AD tenant

以下是組織、訂用帳戶、授權、使用者帳戶的關係範例:Here is an example of the relationship of organizations, subscriptions, licenses, and user accounts:

  • 組織由其公用網域名稱加以識別。 An organization identified by its public domain name.

    • Microsoft 365 E3 訂閱包含使用者授權。A Microsoft 365 E3 subscription with user licenses.

      Microsoft 365 E5 訂閱包含使用者授權。A Microsoft 365 E5 subscription with user licenses.

      Dynamics 365 訂用帳戶包含使用者授權。A Dynamics 365 subscription with user licenses.

      多個 Azure 訂用帳戶。 Multiple Azure subscriptions.

    • 組織的使用者帳戶在同一 Azure AD 租用戶中。The organization's user accounts in a common Azure AD tenant.

多個 Microsoft 雲端供應項目訂用帳戶可以使用作為共同身分識別提供者的相同 Azure AD 租用戶。Multiple Microsoft cloud offering subscriptions can use the same Azure AD tenant that acts as a common identity provider. 內含內部部署 AD DS 的同步處理帳戶的中央 Azure AD 租用戶,可為組織提供雲端型的身分識別即服務 (IDaaS)。A central Azure AD tenant that contains the synchronized accounts of your on-premises AD DS provides cloud-based Identity as a Service (IDaaS) for your organization.

圖 4: 組織同步處理的內部部署帳戶和 IDaaSFigure 4: Synchronized on-premises accounts and IDaaS for an organization

組織的身分識別即服務 (IaaS) IDaaS。

在圖 4 中,Microsoft 的 SaaS 雲端供應項目、Azure PaaS 應用程式、使用 Azure AD 網域服務的 Azure IaaS 中的虛擬機器,三者使用同一個 Azure AD 租用戶。Azure AD Connect 將內部部署的 AD DS 樹系和 Azure AD 租用戶同步。Figure 4 shows how a common Azure AD tenant is used by Microsoft's SaaS cloud offerings, Azure PaaS apps, and virtual machines in Azure IaaS that use Azure AD Domain Services. Azure AD Connect synchronizes the on-premises AD DS forest with the Azure AD tenant.

合併多個 Microsoft 雲端供應項目的訂用帳戶Combining subscriptions for multiple Microsoft cloud offerings

下表說明如何以已有的一種雲端供應項目的一個訂用帳戶為本,合併多個 Microsoft 雲端供應項目 (表中的第一個直列),以及如何為不同的雲端供應項目新增訂用帳戶 (表中的橫行)。The following table describes how you can combine multiple Microsoft cloud offerings based on already having a subscription for one type of cloud offering (the labels going down the first column) and adding a subscription for a different cloud offering (going across the columns).

Microsoft 365Microsoft 365 AzureAzure Dynamics 365Dynamics 365
Microsoft 365Microsoft 365
NANA
您在 Azure 入口網站中為組織新增 Azure 訂用帳戶。You add an Azure subscription to your organization from the Azure portal.
您可以透過 Microsoft 365 系統管理中心為組織新增 Dynamics 365 訂閱。You add a Dynamics 365 subscription to your organization from the Microsoft 365 admin center.
AzureAzure
您為貴組織新增 Microsoft 365 訂閱。You add a Microsoft 365 subscription to your organization.
NANA
您為組織新增 Dynamics 365 訂用帳戶。You add a Dynamics 365 subscription to your organization.
Dynamics 365Dynamics 365
您為貴組織新增 Microsoft 365 訂閱。You add a Microsoft 365 subscription to your organization.
您在 Azure 入口網站中為組織新增 Azure 訂用帳戶。You add an Azure subscription to your organization from the Azure portal.
NANA

要將 Microsoft SaaS 服務的訂用帳戶新增到組織,簡單的做法是透過系統管理中心:An easy way to add subscriptions to your organization for Microsoft SaaS-based services is through the admin center:

  1. 使用您的全域系統管理員帳戶登入 Microsoft 365 系統管理中心 (https://admin.microsoft.com)。Sign in to the Microsoft 365 admin center (https://admin.microsoft.com) with your global administrator account.

  2. [管理中心] 首頁的導覽窗格中,按一下 [計費],然後按一下 [購買服務]From the left navigation of the Admin center home page, click Billing, and then Purchase services.

  3. [購買服務] 頁面上,購買新的訂用帳戶。On the Purchase services page, purchase your new subscriptions.

系統管理中心會將組織和 Microsoft 365 訂閱的 Azure AD 租用戶,指派給 SaaS 型雲端產品的新訂閱。The admin center assigns the organization and Azure AD tenant of your Microsoft 365 subscription to the new subscriptions for SaaS-based cloud offerings.

使用與 Microsoft 365 訂閱相同的組織和 Azure AD 租用戶來新增 Azure 訂閱:To add an Azure subscription with the same organization and Azure AD tenant as your Microsoft 365 subscription:

  1. 使用 Microsoft 365 全域系統管理員帳戶登入 Azure 入口網站 (https://portal.azure.com)。Sign in to the Azure portal (https://portal.azure.com) with your Microsoft 365 global administrator account.

  2. 在左側導覽窗格中,按一下 [訂用帳戶],然後按一下 [新增]In the left navigation, click Subscriptions, and then click Add.

  3. [新增訂用帳戶] 頁面上,選取供應項目,並填寫付款資訊和合約。On the Add subscription page, select an offer and complete the payment information and agreement.

如果您已另外購買 Azure 與 Microsoft 365 訂閱,並想要從您的 Azure 訂閱存取 Microsoft 365 Azure AD 租用戶,請參閱將現有的 Azure 訂閱新增至您的 Azure Active Directory 租用戶中的指示。If you purchased Azure and Microsoft 365 subscriptions separately and want to access the Microsoft 365 Azure AD tenant from your Azure subscription, see the instructions in Add an existing Azure subscription to your Azure Active Directory tenant.

另請參閱See also

Microsoft Cloud for Enterprise Architects 圖例Microsoft cloud for enterprise architects illustrations

適用於 SharePoint、Exchange、商務用 Skype 和 Lync 的架構模型Architectural models for SharePoint, Exchange, Skype for Business, and Lync

混合式解決方案Hybrid solutions

下一步Next step

評定 Microsoft 365 網路連線Assessing Microsoft 365 network connectivity