Mandatory License Assignment for Entra ID Admin Accounts

Question

What are the scenarios in which license assignment is mandatory in Entra ID? There is a use case involving the creation of a second account for the same user to be used for admin access. This admin account won't require access to Teams or any other Microsoft resources; it will simply be an identity managed within Entra ID for assigning admin access to SSO-enabled applications. It would be helpful to understand what type of license these users may need to be assigned in Entra ID.

Answer 1

Hi @Surjeet Singh

If the admin user dosen't need to access to application which require licenses like Microsoft 365, Enterprise Mobility + Security, Dynamics 365, or other similar products,, in this case the licence is not required for admin account.

In my tenant , my admin account is without licence.

---

Please don't forget to accept helpful answer

---

Answer 2

Hello Surjeet, Welcome to MS Q&A

In Microsoft Entra ID, license assignment is mandatory in several scenarios, especially when utilizing features like Identity Governance and Access Reviews. Here are some key scenarios:

Identity Governance: Licenses are required for all employees who can request access packages or are auto-assigned access when an Identity Governance Administrator creates these packages or policies.

Access Reviews: Licenses are necessary for all users involved in the review process, including reviewers and users being reviewed. Each user and reviewer requires a separate license.

Lifecycle Workflows: Licenses are also needed for users involved in Lifecycle Workflows within Microsoft Entra ID Governance.

These scenarios highlight the importance of having the appropriate licenses assigned to users to enable various functionalities within Microsoft Entra ID. For more detailed information, you can refer to the Microsoft Entra licensing documentation.

Please let us know if any further questions

Kindly accept answer if it helps

Thanks

Deepanshu

Answer 3

Hello @Surjeet Singh,

Thank you for reaching out Microsoft Q&A. 

We understand that you would like to know more about mandatory license assignment for Entra ID Admin Accounts. 

In addition to the information shared above, where the second account is created solely for admin access to SSO-enabled applications and does not require access to other Microsoft resources like Teams, the licensing requirements can be more flexible and is available in several licensing options that allow you to choose the package best suited to your needs. Also, no license is required if the only purpose is to create a user identity and assign that identity administrative access to SSO-enabled applications. 

Microsoft Entra ID Free - Included with Microsoft cloud subscriptions such as Microsoft Azure, Microsoft 365, and others. 

Microsoft Entra ID P1 - Microsoft Entra ID P1 is available as a standalone product or included with Microsoft 365 E3 for enterprise customers and Microsoft 365 Business Premium for small to medium businesses. 

Microsoft Entra ID P2 - Microsoft Entra ID P2 is available as a standalone product or included with Microsoft 365 E5 for enterprise customers. 

Microsoft Entra Suite - The suite combines Microsoft Entra products to secure access for your employees. It allows administrators to provide secure access from anywhere to any app or resource whether cloud or on-premises, while ensuring least privilege access. A Microsoft Entra ID P1 subscription is required. The Microsoft Entra suite includes five products: 

Microsoft Entra Private Access 

Microsoft Entra Internet Access 

Microsoft Entra ID Governance 

Microsoft Entra ID Protection 

Microsoft Entra Verified ID (premium capabilities) 

Sharing source document for more information: https://learn.microsoft.com/en-us/entra/fundamentals/licensing

https://learn.microsoft.com/en-us/entra/fundamentals/license-users-groups

 Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.