Entitlement Management Licence Requirement

PT 1 Reputation point
2020-03-25T19:06:41.353+00:00

If an access package is created and assigned to users without being made available for requests is there a licence requirement? The only mention of licences in the MS doc below is as follows;

"Using this feature requires and Azure AD Premium P2 license" for the following tasks;

Member users who can request an access package.
Member and guest users who request an access package.
Member and guest users who approve requests for an access package.

https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-overview#license-requirements

As the packages will not be requested, is the P2 still a requirement?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator
    2020-03-26T23:43:04.333+00:00

    It's still a feature of entitlement management, which requires a P2 License or an Enterprise Mobility + Security E5 License. I tested in my own tenants and noticed that it only worked on the tenant where I had a P2 license applied. https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-first

    Prerequisites
    To use Azure AD entitlement management, you must have one of the following licenses:

    Azure AD Premium P2
    Enterprise Mobility + Security (EMS) E5 license

    I agree that the documentation can be clearer though, as the only prerequisite listed for access package assignment is having the right admin role. I will get the docs updated this week and update this thread once that is done.
    https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-assignments

    0 comments No comments

  2. Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator
    2020-03-26T23:58:08.383+00:00

    I made a pull request to update the documentation. Looks like for the other tasks you need a license for each user that performs it, but for access package assignment in general it seems that you just need the one P2 license on the tenant.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.