Microsoft 365 Certified: Administrator ExpertDeploy and manage a Microsoft 365 tenantMedium
A Microsoft 365 administrator is responsible for managing user licenses. A new department has been created, and 50 new employees need to be assigned F3 licenses. The administrator wants to automate the license assignment process for these new users and ensure that any future users added to this department's security group automatically receive an F3 license. Which method should the administrator use?
- AManual assignment via the Microsoft 365 admin center
- BAzure AD Connect to synchronize license assignments
- CGroup-based licensing in Azure Active Directory
- DPowerShell script to assign licenses to individual users
Show answer & explanationAnswer & explanation
Correct answer: C. Group-based licensing in Azure Active Directory
Group-based licensing in Azure Active Directory (requires Azure AD Premium P1 or P2) allows administrators to assign one or more product licenses to a security group. When users are added to or removed from the group, their license assignments are automatically updated, meeting the automation and future user requirements.
Why the other options are wrong
- A. Manual assignment is tedious for 50 users and doesn't automate future assignments.
- B. Azure AD Connect synchronizes identities, not license assignments, from on-premises AD to Azure AD.
- D. A PowerShell script can assign licenses to existing users but doesn't automatically assign licenses to *future* users added to a group without re-running the script.
Azure AD Group-based Licensing
An Azure AD Premium feature that automates the assignment and removal of Microsoft 365 licenses to users based on their membership in security groups.
- Requires Azure AD Premium P1 or P2 license.
- Simplifies license management for large organizations.
- Automatically handles license assignment and removal as group membership changes.
Memory trick: Think of Group-based licensing as a smart vending machine that gives out licenses based on which club you're in.