Skip to content

Commit 094bf57

Browse files
authored
Merge pull request #78525 from rolyon/rolyon-gen-license-req
[Azure AD] [RBAC] [ELM] [PIM] Added licensing includes
2 parents 9f953fe + 746bbbe commit 094bf57

File tree

5 files changed

+18
-23
lines changed

5 files changed

+18
-23
lines changed

articles/active-directory/governance/access-reviews-overview.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -108,7 +108,7 @@ To onboard access reviews, follow these steps.
108108

109109
1. Follow the instructions to onboard access reviews in the current directory.
110110

111-
## License requirements for using Azure AD access reviews
111+
## License requirements
112112

113113
[!INCLUDE [Azure AD Premium P2 license](../../../includes/active-directory-p2-license.md)]
114114

articles/active-directory/governance/entitlement-management-overview.md

Lines changed: 6 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -76,18 +76,6 @@ You can also control access to other resources that rely upon Azure AD security
7676
- You can give users licenses for Microsoft Office 365 by using an Azure AD security group in an access package and configuring [group-based licensing](../users-groups-roles/licensing-groups-assign.md) for that group
7777
- You can give users access to manage Azure resources by using an Azure AD security group in an access package and creating an [Azure role assignment](../../role-based-access-control/role-assignments-portal.md) for that group
7878

79-
80-
## Prerequisites
81-
82-
To use Azure AD entitlement management (Preview), you must have one of the following licenses:
83-
84-
- Azure AD Premium P2
85-
- Enterprise Mobility + Security (EMS) E5 license
86-
87-
For more information, see [Sign up for Azure Active Directory Premium editions](../fundamentals/active-directory-get-started-premium.md) or [Enterprise Mobility + Security E5 Trial](https://aka.ms/emse5trial).
88-
89-
Specialized clouds, such as Azure Government, Azure Germany, and Azure China 21Vianet, are not currently available for use in this preview.
90-
9179
## What are access packages and policies?
9280

9381
Entitlement management introduces the concept of an *access package*. An access package is a bundle of all the resources a user needs to work on a project or perform their job. The resources include access to groups, applications, or sites. Access packages are used to govern access for your internal employees, and also users outside your organization. Access packages are defined in containers called *catalogs*.
@@ -175,6 +163,12 @@ The following table lists the permissions for each of these roles.
175163
| [Add catalog owners or access package managers](entitlement-management-catalog-create.md#add-catalog-owners-or-access-package-managers) | :heavy_check_mark: | | :heavy_check_mark: | | |
176164
| [Edit/delete a catalog](entitlement-management-catalog-create.md#edit-a-catalog) | :heavy_check_mark: | | :heavy_check_mark: | | |
177165

166+
## License requirements
167+
168+
[!INCLUDE [Azure AD Premium P2 license](../../../includes/active-directory-p2-license.md)]
169+
170+
Specialized clouds, such as Azure Government, Azure Germany, and Azure China 21Vianet, are not currently available for use in this preview.
171+
178172
## Next steps
179173

180174
- [Tutorial: Create your first access package](entitlement-management-access-package-first.md)

articles/active-directory/governance/entitlement-management-troubleshoot.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ This article describes some items you should check to help you troubleshoot Azur
3232

3333
## Checklist for entitlement management administration
3434

35-
* If you get an access denied message when configuring entitlement management, and you are a Global administrator, ensure that your directory has an [Azure AD Premium P2 (or EMS E5) license](entitlement-management-overview.md#prerequisites).
35+
* If you get an access denied message when configuring entitlement management, and you are a Global administrator, ensure that your directory has an [Azure AD Premium P2 (or EMS E5) license](entitlement-management-overview.md#license-requirements).
3636
* If you get an access denied message when creating or viewing access packages, and you are a member of a Catalog creator group, you must create a catalog prior to creating your first access package.
3737

3838
## Checklist for adding a resource

articles/active-directory/privileged-identity-management/pim-configure.md

Lines changed: 6 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -36,15 +36,6 @@ PIM essentially helps you manage the who, what, when, where, and why for resourc
3636
- Conduct **access reviews** to ensure users still need roles
3737
- Download **audit history** for internal or external audit
3838

39-
## Prerequisites
40-
41-
To use PIM, you must have one of the following paid or trial licenses. For more information, see [What is Azure Active Directory?](../fundamentals/active-directory-whatis.md).
42-
43-
- Azure AD Premium P2
44-
- Enterprise Mobility + Security (EMS) E5
45-
46-
For information about licenses for users, see [License requirements to use PIM](subscription-requirements.md).
47-
4839
## Terminology
4940

5041
To better understand PIM and its documentation, you should review the following terms.
@@ -99,6 +90,12 @@ PIM supports the following scenarios:
9990
- View the status of your request to activate
10091
- Complete your task in Azure AD if activation was approved
10192

93+
## License requirements
94+
95+
[!INCLUDE [Azure AD Premium P2 license](../../../includes/active-directory-p2-license.md)]
96+
97+
For information about licenses for users, see [License requirements to use PIM](subscription-requirements.md).
98+
10299
## Next steps
103100

104101
- [License requirements to use PIM](subscription-requirements.md)

articles/role-based-access-control/overview.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -131,6 +131,10 @@ The following are the high-level steps that RBAC uses to determine if you have a
131131

132132
1. If a deny assignment applies, access is blocked. Otherwise access is granted.
133133

134+
## License requirements
135+
136+
[!INCLUDE [Azure AD free license](../../includes/active-directory-free-license.md)]
137+
134138
## Next steps
135139

136140
- [Quickstart: View the access a user has to Azure resources using the Azure portal](check-access.md)

0 commit comments

Comments
 (0)