Microsoft 雲端供應項目的訂用帳戶、授權、帳戶及租用戶

Subscriptions, licenses, accounts, and tenants for Microsoft's cloud offerings

摘要: 了解所有 Microsoft 雲端供應項目上的組織、訂用帳戶、授權、使用者帳戶、租用戶之間的關係。Summary: Understand the relationships of organizations, subscriptions, licenses, user accounts, and tenants across Microsoft's cloud offerings.

Microsoft 提供了組織、訂用帳戶、授權、使用者帳戶的階層,讓您在所有雲端供應項目中能使用一致的身分識別和計費方式: Microsoft provides a hierarchy of organizations, subscriptions, licenses, and user accounts for consistent use of identities and billing across its cloud offerings:

階層的元素Elements of the hierarchy

以下是階層的元素:Here are the elements of the hierarchy:

組織Organization

組織代表正在使用 Microsoft 雲端供應項目的商業實體,通常是用公用網域名稱 (DNS),例如 contoso.com 加以識別。組織是訂用帳戶的容器。 An organization represents a business entity that is using Microsoft cloud offerings, typically identified by a public Domain Name System (DNS) domain name such as contoso.com. The organization is a container for subscriptions.

訂用帳戶Subscriptions

訂用帳戶是與 Microsoft 的協議,同意使用一或多個 Microsoft 雲端平台或服務,並根據每個使用者授權費用或雲端資源耗用量來累算費用。Microsoft 的「軟體即服務」(SaaS) 雲端供應項目 (Office 365、Intune/EMS、Dynamics 365) 會依據每個使用者授權費用收費。Microsoft 的「平台即服務」(PaaS) 和「基礎結構即服務」(IaaS) 雲端供應項目 (Azure) 會依據雲端資源耗用量收費。A subscription is an agreement with Microsoft to use one or more Microsoft cloud platforms or services, for which charges accrue based on either a per-user license fee or on cloud-based resource consumption. Microsoft's Software as a Service (SaaS)-based cloud offerings (Office 365, Intune/EMS, and Dynamics 365) charge per-user license fees. Microsoft's Platform as a Service (PaaS) and Infrastructure as a Service (IaaS) cloud offerings (Azure) charge based on cloud resource consumption.

您也可以使用試用版的訂用帳戶,但在使用特定一段時間或耗用量之後,訂用帳戶便到期。您可以將試用版訂用帳戶轉換為付費訂用帳戶。You can also use a trial subscription, but the subscription expires after a specific amount of time or consumption charges. You can convert a trial subscription to a paid subscription.

組織可有多個訂用帳戶,用於 Microsoft 的多個雲端供應項目。圖 1 為其範例。Organizations can have multiple subscriptions for Microsoft's cloud offerings. Figure 1 shows an example.

圖 1:組織的多個訂用帳戶範例Figure 1: Example of multiple subscriptions for an organization

具有多個 Microsoft 雲端供應項目訂用帳戶的組織範例。

圖 1 顯示單一組織有多個 Office 365 訂用帳戶、一個 Intune 訂用帳戶、一個 Dynamics 365 訂用帳戶、多個 Azure 訂用帳戶。Figure 1 shows a single organization that has multiple Office 365 subscriptions, an Intune subscription, a Dynamics 365 subscription, and multiple Azure subscriptions.

授權Licenses

使用 Microsoft 的 SaaS 雲端供應項目時,授權允許特定使用者帳戶使用該雲端供應項目的服務。固定的每月費用是訂用帳戶的其中一環。系統管理員將授權指派給訂用帳戶中的個別使用者帳戶。在圖 2 的範例中,Contoso 公司有 100 個 Office 365 企業版 E5 的授權, 可讓最多 100 個個別使用者帳戶使用企業版 E5 的功能與服務。For Microsoft's SaaS cloud offerings, a license allows a specific user account to use the services of the cloud offering. You are charged a fixed monthly fee as part of your subscription. Administrators assign licenses to individual user accounts in the subscription. For the example in Figure 2, the Contoso Corporation has an Office 365 Enterprise E5 subscription with 100 licenses, which allows to up to 100 individual user accounts to use Enterprise E5 features and services.

圖 2:SaaS 型訂用帳戶中的組織授權Figure 2: Licenses within the SaaS-based subscriptions for an organization

Microsoft SaaS 型雲端供應項目訂用帳戶中多個授權的範例。

使用 Azure PaaS 型雲端服務時,服務費用已包含軟體授權。For Azure PaaS-based cloud services, software licenses are built into the service pricing.

使用 Azure IaaS 型虛擬機器時,可能會需要額外的授權來使用安裝在虛擬機器映像上的軟體或應用程式。部分虛擬機器映像已安裝軟體的授權版本,費用是由伺服器的每一分鐘費率涵蓋。例如 SQL Server 2014 和 SQL Server 2016 的虛擬機器映像。For Azure IaaS-based virtual machines, additional licenses to use the software or application installed on a virtual machine image might be required. Some virtual machine images have licensed versions of software installed and the cost is included in the per-minute rate for the server. Examples are the virtual machine images for SQL Server 2014 and SQL Server 2016.

部分虛擬機器映像已安裝試用版應用程式,在試用期間過後需要額外的軟體應用程式授權。例如,SharePoint Server 2016 試用版的虛擬機器映像包含預先安裝的 SharePoint Server 2016 試用版。若要在試用到期日之後繼續使用 SharePoint Server 2016,您必須向 Microsoft 購買 SharePoint Server 2016 授權和用戶端授權。這些費用和 Azure 訂用帳戶是分開的,且仍需支付執行虛擬機器的每一分鐘費率。Some virtual machine images have trial versions of applications installed and need additional software application licenses for use beyond the trial period. For example, the SharePoint Server 2016 Trial virtual machine image includes a trial version of SharePoint Server 2016 pre-installed. To continue using SharePoint Server 2016 after the trail expiration date, you must purchase a SharePoint Server 2016 license and client licenses from Microsoft. These charges are separate from the Azure subscription and the per-minute rate to run the virtual machine still applies.

使用者帳戶User accounts

所有 Microsoft 雲端供應項目的使用者帳戶都儲存在 Azure Active Directory (AD) 租用戶,此租用戶包含使用者帳戶和群組。Azure AD Connect 是 Windows 的伺服器型服務,可以將 Azure AD 租用戶與您的現有 Windows Server AD 帳戶同步。這就是所謂的目錄同步處理 (DirSync)。User accounts for all of Microsoft's cloud offerings are stored in an Azure Active Directory (AD) tenant, which contains user accounts and groups. An Azure AD tenant can be synchronized with your existing Windows Server AD accounts using Azure AD Connect, a Windows server-based service. This is known as directory synchronization (DirSync).

圖 3 顯示組織的多個訂用帳戶使用同一個 Azure AD 租用戶,租用戶包含組織的帳戶。Figure 3 shows an example of multiple subscriptions of an organization using a common Azure AD tenant that contains the organization's accounts.

圖 3:組織的多個訂用帳戶使用相同 Azure AD 租用戶的範例。Figure 3: Multiple subscriptions of an organization that use the same Azure AD tenant

多個訂用帳戶皆使用相同 Azure AD 租用戶的組織範例。

租用戶Tenants Table

使用 SaaS 雲端供應項目時,租用戶是指存放提供雲端服務的伺服器的區域位置。例如,Contoso 公司選擇以歐洲區域來裝載它的 Office 365、EMS、Dynamics 365 租用戶,供其巴黎總公司的 15,000 名員工使用。For SaaS cloud offerings, the tenant is the regional location that houses the servers providing cloud services. For example, the Contoso Corporation chose the European region to host its Office 365, EMS, and Dynamics 365 tenants for the 15,000 workers in their Paris headquarters.

Azure PaaS 服務和虛擬機器的工作負載裝載於 Azure IaaS 中,可以將租用戶放在世界各地的 Azure 資料中心內。當您建立 Azure PaaS 應用程式或服務或 IaaS 工作負載的元素時,由您指定 Azure 資料中心 (稱為「位置」)。Azure PaaS services and virtual machine-based workloads hosted in Azure IaaS can have tenancy in any Azure datacenter across the world. You specify the Azure datacenter, known as the location, when you create the Azure PaaS app or service or element of an IaaS workload.

Azure AD 租用戶是包含帳戶和群組的 Azure AD 的特定執行個體。付費版或試用版的 Office 365、Dynamics 365 或 Intune/EMS 訂用帳戶包含一個免費 Azure AD 租用戶。這個 Azure AD 租用戶不包含其他 Azure 服務,和 Azure 試用版或付費版訂用帳戶不同。An Azure AD tenant is a specific instance of Azure AD containing accounts and groups. Paid or trial subscriptions of Office 365, Dynamics 365, or Intune/EMS include a free Azure AD tenant. This Azure AD tenant does not include other Azure services and is not the same as an Azure trial or paid subscription.

階層摘要Summary of the hierarchy

以下是重點複習:Here is a quick recap:

  • 組織可以有多個訂用帳戶。An organization can have multiple subscriptions

    • 訂用帳戶可以有多個授權。A subscription can have multiple licenses

    • 授權可以指派給個別使用者帳戶。Licenses can be assigned to individual user accounts

    • 使用者帳戶儲存在 Azure AD 租用戶。User accounts are stored in an Azure AD tenant

以下是組織、訂用帳戶、授權、使用者帳戶的關係範例:Here is an example of the relationship of organizations, subscriptions, licenses, and user accounts:

  • 組織由其公用網域名稱加以識別。 An organization identified by its public domain name.

    • Office 365 企業版 E3 訂用帳戶包含使用者授權。An Office 365 Enterprise E3 subscription with user licenses.

      Office 365 企業版 E5 訂用帳戶包含使用者授權。An Office 365 Enterprise E5 subscription with user licenses.

      EMS 訂用帳戶包含使用者授權。An EMS subscription with user licenses.

      Dynamics 365 訂用帳戶包含使用者授權。A Dynamics 365 subscription with user licenses.

      多個 Azure 訂用帳戶。 Multiple Azure subscriptions.

    • 組織的使用者帳戶在同一 Azure AD 租用戶中。The organization's user accounts in a common Azure AD tenant.

多個 Microsoft 雲端供應項目的訂用帳戶可以使用相同 Azure AD 租用戶作為共同的身分識別提供者。集中的 Azure AD 租用戶包含內部部署 Windows Server AD 同步處理的帳戶,可為組織提供雲端上的身分識別即服務 (IDaaS)。如圖 4 所示。Multiple Microsoft cloud offering subscriptions can use the same Azure AD tenant that acts as a common identity provider. A central Azure AD tenant that contains the synchronized accounts of your on-premises Windows Server AD provides cloud-based Identity as a Service (IDaaS) for your organization. This is shown in Figure 4.

圖 4: 組織同步處理的內部部署帳戶和 IDaaSFigure 4: Synchronized on-premises accounts and IDaaS for an organization

組織的身分識別即服務 (IaaS) IDaaS。

在圖 4 中,Microsoft 的 SaaS 雲端供應項目、Azure PaaS 應用程式、使用 Azure AD 網域服務的 Azure IaaS 中的虛擬機器,三者使用同一個 Azure AD 租用戶。Azure AD Connect 將內部部署的 Windows Server AD 樹系和 Azure AD 租用戶同步。Figure 4 shows how a common Azure AD tenant is utilized by Microsoft's SaaS cloud offerings, Azure PaaS apps, and virtual machines in Azure IaaS that use Azure AD Domain Services. Azure AD Connect synchronizes the on-premises Windows Server AD forest with the Azure AD tenant.

有關 Microsoft 雲端供應項目的身分識別整合,詳細資訊請參閱企業架構的 Microsoft 雲端身分識別For more information about identity integration across Microsoft's cloud offerings, see Microsoft Cloud Identity for Enterprise Architects.

合併多個 Microsoft 雲端供應項目的訂用帳戶Combining subscriptions for multiple Microsoft cloud offerings

下表說明如何以已有的一種雲端供應項目的一個訂用帳戶為本,合併多個 Microsoft 雲端供應項目 (表中的第一個直列),以及如何為不同的雲端供應項目新增訂用帳戶 (表中的橫行)。The following table describes how you can combine multiple Microsoft cloud offerings based on already having a subscription for one type of cloud offering (the labels going down the first column) and adding a subscription for a different cloud offering (going across the columns).

Office 365Office 365 AzureAzure Intune/EMSIntune/EMS Dynamics 365Dynamics 365
Office 365Office 365
NANA
您在 Azure 入口網站中為組織新增 Azure 訂用帳戶。You add an Azure subscription to your organization from the Azure portal.
您在 Office 365 入口網站中為組織新增 Intune/EMS 訂用帳戶。You add an Intune/EMS subscription to your organization from the Office 365 portal.
您在 Office 365 入口網站中為組織新增 Dynamics 365 訂用帳戶。You add a Dynamics 365 subscription to your organization from the Office 365 portal.
AzureAzure
您為組織新增 Office 365 訂用帳戶。You add an Office 365 subscription to your organization.
NANA
您為組織新增 Intune/EMS 訂用帳戶。You add an Intune/EMS subscription to your organization.
您為組織新增 Dynamics 365 訂用帳戶。You add a Dynamics 365 subscription to your organization.
Intune/EMSIntune/EMS
您為組織新增 Office 365 訂用帳戶。You add an Office 365 subscription to your organization.
您在 Azure 入口網站中為組織新增 Azure 訂用帳戶。You add an Azure subscription to your organization from the Azure portal.
NANA
您為組織新增 Dynamics 365 訂用帳戶。You add a Dynamics 365 subscription to your organization.
Dynamics 365Dynamics 365
您為組織新增 Office 365 訂用帳戶。You add an Office 365 subscription to your organization.
您在 Azure 入口網站中為組織新增 Azure 訂用帳戶。You add an Azure subscription to your organization from the Azure portal.
您為組織新增 Intune/EMS 訂用帳戶。You add an Intune/EMS subscription to your organization.
NANA

要將 Microsoft SaaS 服務的訂用帳戶新增到組織,簡單的做法是透過 Office 365 管理中心:An easy way to add subscriptions to your organization for Microsoft SaaS-based services is through the Office 365 Admin center:

  1. 使用全域系統管理員帳戶登入 Office 365 入口網站 (https://portal.office.com),然後按一下 [管理]*Sign in to the Office 365 portal (https://portal.office.com) with your global administrator account, and then click *Admin.

  2. 在 [管理中心]**** 首頁的導覽窗格中,按一下 [計費]*,然後按一下 [購買服務]From the left navigation of the **Admin center* home page, click Billing, and then Purchase services.

  3. 在 [購買服務]**** 頁面上,購買新的訂用帳戶。On the Purchase services page, purchase your new subscriptions.

Office 365 管理中心會將組織和 Office 365 訂用帳戶的 Azure AD 租用戶,指派給 SaaS 雲端供應項目的新訂用帳戶。The Office 365 Admin center assigns the organization and Azure AD tenant of your Office 365 subscription to the new subscriptions for SaaS-based cloud offerings.

使用與 Office 365 訂用帳戶相同的組織和 Azure AD 租用戶進行新增:To add an Azure subscription with the same organization and Azure AD tenant as your Office 365 subscription:

  1. 使用 Office 365 全域管理員帳戶登入 Azure 入口網站 (https://portal.azure.com)。Sign in to the Azure portal (https://portal.azure.com) with your Office 365 global administrator account.

  2. 在左側導覽窗格中,按一下 [訂用帳戶]*,然後按一下 [新增]In the left navigation, click **Subscriptions, and then click **Add*.

  3. 在 [新增訂用帳戶]**** 頁面上,選取供應項目,並填寫付款資訊和合約。On the Add subscription page, select an offer and complete the payment information and agreement.

如果您已另外購買 Azure 與 Office 365 訂用帳戶,想要從您的 Azure 訂用帳戶存取 Office 365 Azure AD 租用戶,請參閱建立 Office 365 租用戶與 Azure 訂用帳戶的關聯中的指示。If you purchased Azure and Office 365 subscriptions separately and want to access the Office 365 Azure AD tenant from your Azure subscription, see the instructions in Associate an Office 365 tenant with an Azure subscription.

另請參閱See Also

Microsoft Cloud IT 架構資源Microsoft Cloud IT architecture resources

雲端採用測試實驗室指南 (TLG)Cloud adoption Test Lab Guides (TLGs)

適用於 SharePoint、Exchange、商務用 Skype 和 Lync 的架構模型Architectural models for SharePoint, Exchange, Skype for Business, and Lync

混合式解決方案Hybrid solutions

Contoso 公司的訂用帳戶、授權及使用者帳戶Subscriptions, licenses, and user accounts for the Contoso Corporation