Problem with O365 group licensing?

JBA Matt 96 Reputation points
2020-09-02T15:29:05.557+00:00

Hi, I'm trying to migrate to using group licensing as described in https://video2.skills-academy.com/en-us/azure/active-directory/users-groups-roles/licensing-groups-assign.

I've followed the process to assign licenses using a group in AAD, but it doesn't seem to apply - if I remove the license that was directly associated with a user account that is also a member of the group I'm using, the license doesn't get added again.

As far as I can tell the process should be really simple: can anyone suggest where I've gone wrong please?

Thanks!

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,367 questions
Accepted answer
  1. JBA Matt 96 Reputation points
    2020-09-03T07:51:46.35+00:00

    I should've googled before I posted that last comment... nested groups aren't supported! https://video2.skills-academy.com/en-us/azure/active-directory/users-groups-roles/licensing-group-advanced

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 103.9K Reputation points MVP
    2020-09-02T17:59:06.56+00:00

    It might take some time for licensing changes to be processed, you can check the status by going to the Groups' properties page in the Azure AD blade, then click the Licenses tab.

    0 comments
  2. JBA Matt 96 Reputation points
    2020-09-03T07:42:13.647+00:00

    Thanks for the reply @Vasil Michev . The status on the license tab shows "License changes have been applied to all users", but the number of assigned licenses in O365 remains unchanged. Choosing "reprocess" doesn't alter anything either.

    0 comments
  3. JBA Matt 96 Reputation points
    2020-09-03T07:49:41.737+00:00

    A bit of experimenting suggests that the problem seems to be related to nested groups: the group I'm using to assign licenses contains other groups synchronised from my on-premise AD, which contain my user accounts. If I add a user directly to the "top level" group, the license is assigned correctly.
    Is this expected behaviour? Surely nested groups should be supported?

    Thanks

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.