Entitlement Management Licence Requirement

PT 1 Reputation point
2020-03-25T19:06:41.353+00:00

If an access package is created and assigned to users without being made available for requests is there a licence requirement? The only mention of licences in the MS doc below is as follows;

"Using this feature requires and Azure AD Premium P2 license" for the following tasks;

Member users who can request an access package.
Member and guest users who request an access package.
Member and guest users who approve requests for an access package.

https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-overview#license-requirements

As the packages will not be requested, is the P2 still a requirement?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,432 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Marilee Turscak-MSFT 33,801 Reputation points Microsoft Employee
    2020-03-26T23:43:04.333+00:00

    It's still a feature of entitlement management, which requires a P2 License or an Enterprise Mobility + Security E5 License. I tested in my own tenants and noticed that it only worked on the tenant where I had a P2 license applied. https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-first

    Prerequisites
    To use Azure AD entitlement management, you must have one of the following licenses:

    Azure AD Premium P2
    Enterprise Mobility + Security (EMS) E5 license

    I agree that the documentation can be clearer though, as the only prerequisite listed for access package assignment is having the right admin role. I will get the docs updated this week and update this thread once that is done.
    https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-assignments

    0 comments No comments

  2. Marilee Turscak-MSFT 33,801 Reputation points Microsoft Employee
    2020-03-26T23:58:08.383+00:00

    I made a pull request to update the documentation. Looks like for the other tasks you need a license for each user that performs it, but for access package assignment in general it seems that you just need the one P2 license on the tenant.