Entitlement Management Licence Requirement

PT 1 Reputation point
2020-03-25T19:06:41.353+00:00

If an access package is created and assigned to users without being made available for requests is there a licence requirement? The only mention of licences in the MS doc below is as follows;

"Using this feature requires and Azure AD Premium P2 license" for the following tasks;

Member users who can request an access package.
Member and guest users who request an access package.
Member and guest users who approve requests for an access package.

https://video2.skills-academy.com/en-us/azure/active-directory/governance/entitlement-management-overview#license-requirements

As the packages will not be requested, is the P2 still a requirement?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,449 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marilee Turscak-MSFT 36,841 Reputation points Microsoft Employee
    2020-03-26T23:43:04.333+00:00

    It's still a feature of entitlement management, which requires a P2 License or an Enterprise Mobility + Security E5 License. I tested in my own tenants and noticed that it only worked on the tenant where I had a P2 license applied. https://video2.skills-academy.com/en-us/azure/active-directory/governance/entitlement-management-access-package-first

    Prerequisites
    To use Azure AD entitlement management, you must have one of the following licenses:

    Azure AD Premium P2
    Enterprise Mobility + Security (EMS) E5 license

    I agree that the documentation can be clearer though, as the only prerequisite listed for access package assignment is having the right admin role. I will get the docs updated this week and update this thread once that is done.
    https://video2.skills-academy.com/en-us/azure/active-directory/governance/entitlement-management-access-package-assignments

    0 comments
  2. Marilee Turscak-MSFT 36,841 Reputation points Microsoft Employee
    2020-03-26T23:58:08.383+00:00

    I made a pull request to update the documentation. Looks like for the other tasks you need a license for each user that performs it, but for access package assignment in general it seems that you just need the one P2 license on the tenant.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.