Skip to content

Commit 6e8dccc

Browse files
committed
github-group-licensing-111722
1 parent b7b5c50 commit 6e8dccc

File tree

5 files changed

+16
-10
lines changed

5 files changed

+16
-10
lines changed

articles/active-directory/enterprise-users/licensing-group-advanced.md

Lines changed: 16 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -23,12 +23,18 @@ Use the following information and examples to gain a more advanced understanding
2323

2424
## Usage location
2525

26-
Some Microsoft services aren't available in all locations. Before a license can be assigned to a user, the administrator should specify the **Usage location** property on the user. In [the Azure portal](https://portal.azure.com), you can specify usage location in **User** > **Profile** > **Settings**.
26+
Some Microsoft services aren't available in all locations. Before a license can be assigned to a user, the administrator should specify the **Usage location** property on the user.
27+
28+
1. Sign in to the [Azure portal](https://portal.azure.com) in the **User Administrator** role.
29+
1. Go to **Azure AD** > **Users** and select a user.
30+
1. Select **Edit properties**.
31+
1. Select the **Settings** tab and enter a location for the user.
32+
1. Select the **Save** button.
2733

2834
For group license assignment, any users without a usage location specified inherit the location of the directory. If you have users in multiple locations, make sure to reflect that correctly in your user resources before adding users to groups with licenses.
2935

3036
> [!NOTE]
31-
> Group license assignment will never modify an existing usage location value on a user. We recommend that you always set usage location as part of your user creation flow in Azure AD (for example, via AAD Connect configuration) - that will ensure the result of license assignment is always correct, and users do not receive services in locations that are not allowed.
37+
> Group license assignment will never modify an existing usage location value on a user. We recommend that you always set usage location as part of your user creation flow in Azure AD (for example, via AAD Connect configuration). Following such a process ensures the result of license assignment is always correct, and users do not receive services in locations that are not allowed.
3238
3339
## Use group-based licensing with dynamic groups
3440

@@ -40,21 +46,21 @@ Licenses are assigned to the user shortly after they're added to the group. When
4046

4147
### Example
4248

43-
Consider the example of an on-premises identity management solution that decides which users should have access to Microsoft web services. It uses **extensionAttribute1** to store a string value representing the licenses the user should have. Azure AD Connect syncs it with Azure AD.
49+
Consider the example of an on-premises identity management solution that decides which users should have access to Microsoft web services. It uses `extensionAttribute1` to store a string value representing the licenses the user should have. Azure AD Connect syncs it with Azure AD.
4450

45-
Users might need one license but not another, or might need both. Here's an example, in which you're distributing Office 365 Enterprise E5 and Enterprise Mobility + Security (EMS) licenses to users in groups:
51+
Users might need one license but not another, or might need both. Here's an example, in which you're distributing Microsoft 365 E5 and Enterprise Mobility + Security (EMS) licenses to users in groups:
4652

47-
#### Office 365 Enterprise E5: base services
53+
#### Microsoft 365 E5
4854

49-
![Screenshot of Office 365 Enterprise E5 base services](./media/licensing-group-advanced/o365-e5-base-services.png)
55+
![Screenshot of Microsoft 365 E5 attribute in dynamic membership rules.](./media/licensing-group-advanced/dynamic-groups-rules-E5.png)
5056

5157
#### Enterprise Mobility + Security: licensed users
5258

53-
![Screenshot of Enterprise Mobility + Security licensed users](./media/licensing-group-advanced/o365-e5-licensed-users.png)
59+
![Screenshot of EMS and Microsoft 365 E5 dynamic membership rules.](./media/licensing-group-advanced/dynamic-groups-rules-EMS.png)
5460

55-
For this example, modify one user and set their extensionAttribute1 to the value of `EMS;E5_baseservices;` if you want the user to have both licenses. You can make this modification on-premises. After the change syncs with the cloud, the user is automatically added to both groups, and licenses are assigned.
61+
For this example, modify one user and set their extensionAttribute1 to the value of `EMS;SPE_E5;` if you want the user to have both licenses. You can make this modification on-premises. After the change syncs with the cloud, the user is automatically added to both groups, and licenses are assigned.
5662

57-
![Screenshot showing how to set the user's extensionAttribute1](./media/licensing-group-advanced/user-set-extensionAttribute1.png)
63+
![Screenshot of Enterprise Mobility + Security licensed user.](./media/licensing-group-advanced/user-license-dynamic.png)
5864

5965
> [!WARNING]
6066
> Use caution when modifying an existing group’s membership rule. When a rule is changed, the membership of the group will be re-evaluated and users who no longer match the new rule will be removed (users who still match the new rule will not be affected during this process). Those users will have their licenses removed during the process which may result in loss of service, or in some cases, loss of data.
@@ -94,7 +100,7 @@ As an administrator, you can review all groups affected by the change and take a
94100

95101
Here's an example of what this process may look like:
96102

97-
1. Originally, you assigned the *Microsoft 365 Enterprise E5* product to several groups. One of those groups, called *Microsoft 365 E5 - Exchange only* was designed to enable only the *Exchange Online (Plan 2)* service for its members.
103+
1. Originally, you assigned the *Microsoft 365 E5* product to several groups. One of those groups, called *Microsoft 365 E5 - Exchange only* was designed to enable only the *Exchange Online (Plan 2)* service for its members.
98104

99105
2. You received a notification from Microsoft that the E5 product will be extended with a new service - *Microsoft Stream*. When the service becomes available in your organization, you can complete the following steps:
100106

63.8 KB
Loading
66.8 KB
Loading
51.8 KB
Loading

0 commit comments

Comments
 (0)