Question about M365 licenses

Question

Hi team,

I want to know more about the M365 licenses.
I used this API to get user MFA information.

https://learn.microsoft.com/en-us/graph/api/resources/credentialuserregistrationdetails?view=graph-rest-beta

the requirement to use this API is following like this.

1. Having Azure AD Premium P1 or P2 license
2. A user that has appropriate permissions like global reader.

So I registered E5 developer license(containing both of licenses) and made a user that had global reader role.
During a test phase, I found that I was able to get MFA information through the API even if the user had yet to be assigned P1 or P2 license.
Does this result mean that you don`t need to assign licenses to user?(Is it OK if your tenant have those licenses?)

Also I found that I got all user MFA information without assigning licenses to them.
Is this the expected result?

Best regards.

Answer 1

Hello @YusukeYamashita-6797,

Yes, if your tenant has an Azure AD Premium P1 or P2 license, you will be able to use the API to retrieve MFA information for your users. It is not necessary to assign these licenses to individual users in order to use the API. However, keep in mind that certain features of Azure AD Premium, such as MFA and self-service password reset, may not be available to users unless they are assigned an Azure AD Premium P1 or P2 license.

As for the second part of your question, if you are able to retrieve MFA information for all users in your tenant without assigning licenses to them, this may be due to the fact that the API is returning information about the MFA status of all users in your tenant, regardless of whether they have been assigned a license or not. However, this could also be due to a misconfiguration in your tenant or a bug in the API. It's always a good idea to double-check the documentation and test thoroughly to ensure that you are getting the expected results.

Good luck!