P2 license for Entitlement management

Question

We want to manage our partners admin to manage access for their employees to app through access package. I understand that I need one P2 license for admin who will create access package.

But does P2 license is a requirement for approver, requester if both are going to be external users. I read that 50000 MAU are free for external users and no license is required until we hit this number.

Answer 1

Hi @jaideep ,

My apologies! Yes, you are correct. It depends on which licensing model you are using, but the MAU model is the recommended option though not everyone will have that model. It is worth noting that requesting, approving, reviewing, or having assignments count as "usage", so when counting the number of guest users using P2 features, you can use those activities to determine how many guest users are in scope, alongside the usage of other Premium features. If your tenant is using the external identities MAU model, you just need to have one Premium P2 license for the first 50,000 users, and then will get charged after reaching the cap like you said. You will also need to have enough P2 licenses for Member users that are able to request, approve, review, or assign.

Sorry for the confusion. Not everyone is using the Monthly Active User model so guidelines are a little bit different depending on the scenario.

Thanks,

Marilee

-

If this answer helped resolve your question, please remember to "mark as answer" so that others in the community with similar questions can more easily find a solution.

Answer 2

Hi @jaideep ,

Thank you for your question. Yes, they will need the licenses. To be compliant with licensing requirements, both member users and guest users must have Premium P2 licenses to request or approve requests for access packages.

From the documentation:

How many licenses must you have?

Ensure that your directory has at least as many Azure AD Premium P2 licenses as you have:

Member users who can request an access package.
Member users who request an access package.
Member users who approve requests for an access package.
Member users who review assignments for an access package.
Member users who have a direct assignment to an access package.

For guest users, licensing needs will depend on the licensing model you’re using. However, the below guest users’ activities are considered Azure AD Premium P2 usage:

Guest users who request an access package.
Guest users who approve requests for an access package.
Guest users who review assignments for an access package.
Guest users who have a direct assignment to an access package.

Azure AD Premium P2 licenses are not required for the following tasks:

No licenses are required for users with the Global Administrator role who set up the initial catalogs, access packages, and policies, and delegate administrative tasks to other users.
No licenses are required for users who have been delegated administrative tasks, such as catalog creator, catalog owner, and access package manager.
No licenses are required for guests who have a privilege to request access packages but they do not choose to request them.

Generally in Azure, everything is licensed per user which means that anyone who benefits directly or indirectly from a service should have the proper license. You are also welcome to create a free ticket with billing support if you have questions around specific scenarios and pricing.

Let me know if this helps.

-

If this answer resolved your question, please remember to "mark as answer' so that others in the community with similar questions can more easily find a solution.