Office 365 license assignment to Azure AD users is controlled or restricted by creating a new provisioning policy and applying the policy to the Organizational Unit.
To create and apply the new policy
|
NOTE: In Active Roles Console, select Office 365 License Management as the Policy to Configure page. |
The Policy is triggered for any Azure AD user in the Organization Unit for which the Office 365 License Management policy is applied.
If the policy conditions are not satisfied while assigning or modifying Azure AD User licenses, the following policy violation error is displayed:
Provisioning policy failure. The Office365 License Management policy encountered an error. Excepton in Office365 License Management Policy violation: The Azure user License(s) O365_BUSINESS_ESSENTIALS-INTUNE_O365, can be assigned. The policy prescribes that this Azure User requires only the specified license in the policy object to be assigned.
For a container object, this displays the Check Policy dialog box.
The Policy Check Results window is displayed.
|
NOTE: For information on Azure AD user provisioning policy for Office 365 licenses management see the Office 365 License Management section in the Active Roles Administration Guide. |
Active Roles enables you to perform the following Office 365 roles management tasks for hybrid users:
To assign Office 365 roles to existing hybrid users
The Azure Properties dialog box for the user is displayed.
The O365 Roles wizard displays the Office 365 roles, for example the Helpdesk Administrator, Directory Readers, and more.
Select the check boxes corresponding to the Office 365 roles that need to be assigned to the user, and click Finish.
To modify the Office 365 roles assigned to existing hybrid users
The O365 Roles wizard displays the Office 365 roles, for example the Helpdesk Administrator, Directory Readers, and more.
Select or clear the check boxes corresponding to the Office 365 roles that need to be assigned or removed for the user, and click Finish.
The Office 365 roles assigned can be viewed on the user's Azure Properties | O365 Roles wizard.
The results can also be viewed on the Azure portal's Licenses and Directory role tabs.
|
NOTE: When a user is de-provisioned, all the roles that were assigned to the user are retained. |
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback 이용 약관 개인정보 보호정책