Licence assignment made to the direct members of a security-enabled group, requiring Entra ID P1 or P2. Members of nested groups are not included, and a licence a user inherits cannot be removed from that user directly.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Group-based licensing in context, with comparison tables and the common traps.
Terms in this definition
- Licence
What entitles one particular user to the services a subscription offers. Each product licence is made up of several service plans (one per app or service), and before giving it to someone an admin has to record that user's usage location.
- Entra ID P1
Conditional Access requires this Entra licence, as does protecting on-premises AD with Password Protection.
- Nested groups
Groups placed inside other groups as members. Azure honours role assignments made via such nesting, whereas group-based licensing applies only to direct members.
- Chat message roles
Labels on chat messages: instructions go under system, the person's input under user, the model's previous answers under assistant, and results returned by a called tool under tool (or function).
Related terms
- Mail-enabled security group
Group combining security permissions with an email address, administered through Exchange or the Microsoft 365 admin centre. Group-based licensing supports it, according to the current documentation.
- Microsoft Entra ID Free
Edition of Entra ID that comes with Microsoft 365 and Azure subscriptions. Premium features like group-based licensing are missing, so licences have to go directly to users.
- Usage location
A user attribute that exists only in the cloud (AD sync doesn't supply it) and is required before a licence can be assigned directly. Group-based licensing once required it too, but now defaults to the tenant's location.