Azure AD P2 License

naresh malhotra 1 Reputation point
2021-03-17T12:34:54.4+00:00

Hi Folks,

We are using conditional access, sso, risky signin and other functionalities of azure ad. Currently Azure AD P2 license is not assigned to all user but the functionalities are working fine for all them. Now, few admin users are assigned with P2 license.

My question is why do we need to assign the license to admin users when the configured functionalities are all working for all the users...

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,591 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Marilee Turscak-MSFT 34,051 Reputation points Microsoft Employee
    2021-03-17T17:03:52.887+00:00

    Your licensing agreement will tell you what is required for your users and I would recommend speaking with your licensing representative of choice for clarification around these features. You can also verify on the pricing pages. https://azure.microsoft.com/en-us/pricing/details/active-directory/

    Some of those features require licensing and some do not. SSO for pre-integrated SaaS applications is free. However, the number of objects in your directory and the features you wish to deploy may require additional licenses.

    Conditional Access requires a Premium P1 license and not a P2 license, but for risk-based conditional access a Premium P2 license is required.


  2. Leandro de Abreu Mascarenhas 1 Reputation point
    2022-11-03T17:40:41.623+00:00

    Olá/Hi, @naresh malhotra !

    Azure Active Directory Premium Plan 1 or Azure Active Directory Premium Plan 2 are licenses or resources of online services contracted on an individual subscription basis and assigned to services or users.

    If you consider the trust relationship between your tenant and your users, you will realize that each user will need to have an Azure AD subscription (P1 or P2, as needed).

    Hope this helps.
    Success for ALL of us!


    Os Azure Active Directory Premium Plan 1 ou Azure Active Directory Premium Plan 2 são licenças ou recursos de serviços online contratados por subscrição individual e atribuídas a serviços ou usuários.

    Se considerar a relação de confiança em seu tenant e a seus usuários perceberá que cada usuário precisará ter uma assinatura do Azure AD (P1 ou P2, conforme a necessidade).

    Espero ter ajudado.
    Sucesso para TODOS nós!

    Subscription License Suites - https://www.microsoft.com/licensing/terms/product/SubscriptionLicenseSuites/all
    Trust relationship with Azure Active Directory - https://learn.microsoft.com/en-gb/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory

    0 comments No comments