Tutorial / Cram Notes
Microsoft 365 admin center allows administrators to assign licenses to users individually or in bulk. Here’s how you can assign licenses:
Individual License Assignment:
- Go to the Microsoft 365 admin center.
- Navigate to Users > Active users.
- Select the user to whom you want to assign a license.
- Click on Licenses and Apps.
- Check the box for the license you want to assign.
- Save changes.
Bulk License Assignment:
- In the Microsoft 365 admin center, go to Users > Active users.
- Use the bulk edit option by selecting multiple users.
- Click “Edit” in the Product licenses section.
- Choose the appropriate license to assign.
- Save your changes.
PowerShell can also be used for bulk operations, significantly speeding up the process, especially for larger organizations:
$LicenseOption = New-MsolLicenseOptions -AccountSkuId “yourtenant:ENTERPRISEPACK”
$UsersToLicense = Get-MsolUser -All | Where-Object {$_.IsLicensed -eq $false}
foreach ($User in $UsersToLicense) {
Set-MsolUserLicense -UserPrincipalName $User.UserPrincipalName -AddLicenses “yourtenant:ENTERPRISEPACK” -LicenseOptions $LicenseOption
}
Modifying Licenses
Sometimes, an administrator may need to change the licenses assigned to a user or modify which services are available within a license. This can also be done in the Microsoft 365 admin center or via PowerShell. For example, if you want to disable a specific service, like Exchange Online, for a user, you would:
Through Admin Center:
- Go to the Microsoft 365 admin center.
- Navigate to Users > Active users and select the user.
- Click on Licenses and Apps.
- Uncheck the box for the service you want to disable.
- Save changes.
Using PowerShell:
$UserLicense = New-Object -TypeName Microsoft.Open.AzureAD.Model.AssignedLicense
$License = Get-AzureADSubscribedSku | Where-Object {$_.SkuPartNumber -eq “ENTERPRISEPACK”}
$DisabledPlans = $License.ServicePlans | Where-Object {$_.ServicePlanName -eq “EXCHANGE_S_STANDARD”} | Select-Object -ExpandProperty ServicePlanId
$UserLicense.SkuId = $License.SkuId
$UserLicense.DisabledPlans = $DisabledPlans
Set-AzureADUserLicense -ObjectId
Reporting on Licenses
Reporting on licenses is essential for audits, compliance, and budgetary reasons. Microsoft offers several ways to generate reports on license status:
License Overview Report:
- Go to the Microsoft 365 admin center.
- Navigate to Reports > Usage.
- Review the provided charts and data for a high-level overview of license utilization.
Detailed License Report:
- Utilize the Microsoft 365 admin center’s user list export capability with detailed license info.
- For automation or more detailed reports, PowerShell is again a powerful tool.
Using PowerShell, you can retrieve a full list of users along with their license status:
Get-MsolUser -All | Select-Object DisplayName, UserPrincipalName, @{Name=”Licenses”;Expression={$_.Licenses.AccountSkuId}} | Export-Csv -Path “UserLicenseReport.csv” -NoTypeInformation
This will create a CSV file called `UserLicenseReport.csv` with user names, principal names, and the SKUs of assigned licenses.
Remember, when you’re preparing for the SC-300 exam, hands-on experience is key. Working directly in the admin center, as well as with the PowerShell command line, will provide you with the practical knowledge you need to succeed on the exam and in managing licenses within your organization. Regularly review and update your processes for assigning, modifying, and reporting on licenses to ensure that you remain efficient and compliant with your organization’s licensing requirements.
Practice Test with Explanation
True or False: In Azure Active Directory, it is impossible to assign a license to a group.
- False
Azure Active Directory allows for group-based licensing, which lets administrators assign a license to a group of users. Any user that is a member of the group will automatically receive the license assigned to the group.
Which of the following PowerShell cmdlets can be used to assign a license to a user in Azure AD? (Select all that apply)
- A) New-AzureADUserLicense
- B) Set-AzureADUserLicense
- C) Add-AzureADUserLicense
- D) Set-MsolUserLicense
The correct answers are B and D.
Set-AzureADUserLicense is the cmdlet used in the Azure AD PowerShell module, while Set-MsolUserLicense is used in the MSOnline module to assign licenses to users.
True or False: You can use the Azure portal to assign licenses to multiple users at once.
- True
The Azure portal allows the assignment of licenses to multiple users at once through the bulk operations feature.
What feature must be enabled to automatically assign licenses to new users who join specific groups?
- A) Group-based licensing
- B) Dynamic User provisioning
- C) License auto-enrollment
- D) Dynamic group membership
The correct answer is A.
Group-based licensing must be enabled to automatically assign licenses to new users who are added to specific groups that have licenses assigned to them.
True or False: When assigning licenses, an admin can only add or remove product licenses, but cannot modify sub-licenses or service plans within a product license.
- False
An admin can add or remove product licenses and can also modify sub-licenses or service plans within a product license. This allows for more granular control over the services each user has access to.
True or False: License reports in Azure AD can be generated to show license utilization and individual service plan activations.
- True
Azure AD provides detailed licensing reports that show license utilization among users, including information about which service plans within those licenses are activated.
Which Azure AD feature can help reduce costs by removing licenses from inactive users?
- A) License Utilization Review
- B) Group-based License Management
- C) License Reclamation Workflow
- D) Inactive User License Reassignment
The correct answer is C.
License Reclamation Workflow can help organizations to reclaim and remove licenses from inactive users automatically, helping to reduce unnecessary license costs.
True or False: When assigning a license to a user, the country or region associated with the user account must match the location where the license was purchased.
- True
When assigning a license, the country or region set on the user’s account must be considered as licenses are sold specific to regions and this can affect service availability and compliance.
How can an administrator receive alerts about nearing their available license limits?
- A) Setting up billing alerts
- B) Configuring license-based alerts in Azure Monitor
- C) Subscribing to Azure AD Premium
- D) Enabling email notifications in Azure Service Health
The correct answer is B.
Configuring license-based alerts in Azure Monitor can help administrators to receive notifications about nearing their available license limits.
True or False: Azure AD supports license assignments for B2B guest users in the same way as for full members of the directory.
- True
Azure AD does support assigning licenses to B2B guest users similarly to how licenses are assigned to full members of the directory.
Which report in Azure AD provides information on licenses that need attention due to being over-assigned or expired?
- A) License Utilization Report
- B) License Expiration Report
- C) Licenses to Reconcile Report
- D) License Assignment Report
The correct answer is C.
The “Licenses to Reconcile Report” in Azure AD helps identify licenses that are over-assigned or have expired, providing the opportunity to correct license assignments.
Interview Questions
What is a subscription in Microsoft 365?
A subscription is a purchase agreement that enables access to Microsoft cloud offerings.
What is a license in Microsoft 365?
A license is the right to use a Microsoft cloud offering.
What is an account in Microsoft 365?
An account is a user’s identity in Microsoft cloud offerings.
What is a tenant in Microsoft 365?
A tenant is a dedicated instance of the Microsoft cloud for an organization.
How do you assign or modify licenses in Microsoft 365?
To assign or modify licenses in Microsoft 365, navigate to the Microsoft 365 Admin Center, select the user you want to assign or modify licenses for, and then select the desired licenses under the Licenses and Apps tab.
How do you report on licenses in Microsoft 365?
To report on licenses in Microsoft 365, navigate to the Reports tab in the Microsoft 365 Admin Center and select the Usage report. Then, select the type of license you want to report on and click Run Report.
What is Office 365 PowerShell?
Office 365 PowerShell is a command-line tool that allows you to manage user accounts and licenses in Microsoft 365.
How do you manage user accounts and licenses with Office 365 PowerShell?
To manage user accounts and licenses with Office 365 PowerShell, you need to install and configure the tool, connect to your Microsoft 365 organization, and use Office 365 PowerShell cmdlets to manage user accounts and licenses.
What is Set-MsolUserLicense?
Set-MsolUserLicense is an Office 365 PowerShell cmdlet that allows you to assign licenses to a user.
What is Get-MsolUser?
Get-MsolUser is an Office 365 PowerShell cmdlet that allows you to retrieve information about a user.
What are some best practices for managing licenses in Microsoft 365?
Best practices for managing licenses in Microsoft 365 include using role-based access control, assigning licenses to groups, using reports to monitor license usage, and reviewing license assignments regularly.
How can role-based access control help with license management in Microsoft 365?
Role-based access control allows you to assign permissions based on a user’s job function, which helps ensure that users have the appropriate level of access to license management tools.
Why should you assign licenses to groups rather than individual users in Microsoft 365?
Assigning licenses to groups rather than individual users can simplify license management and reduce the risk of errors.
How can you use reports in the Microsoft 365 Admin Center to monitor license usage?
You can use reports in the Microsoft 365 Admin Center to monitor license usage by selecting the Usage report and then selecting the type of license you want to report on.
Why is it important to review license assignments regularly in Microsoft 365?
Reviewing license assignments regularly helps ensure that users have the appropriate level of access to resources and applications, and can help identify potential issues such as unauthorized license assignments.
Great post on assigning, modifying, and reporting on licenses for SC-300! It really helped clarify things for me.
Can someone explain the difference between Azure AD P1 and P2 in terms of license management?
I struggled a bit with understanding dynamic group licensing. Any tips?
Is there an efficient way to bulk assign licenses?
Appreciate the blog post!
Is there any way to automate the reporting on license assignments?
The UI for managing licenses in Azure AD could be more intuitive.
I’m facing issues with license reconciliation. Any advice?