Active Roles 7.2.1 - Azure Active Directory and Office 365 Administrator Guide

Modify or remove Office 365 licenses

Modify or remove Office 365 licenses assigned to hybrid users

To modify or remove the Office 365 license assigned to existing hybrid users

1. On the Active Roles Web interface Navigation bar, click Directory Management.
2. On the Views tab in the Browse pane, click Active Directory.

   The list of Active Directory domains is displayed.

3. Click the specific domain, Container or the Organizational Unit, and then select the check-box corresponding to the specific user for which you want to view or update the properties.
4. In the Command pane, click Azure properties.
5. In the Azure Properties dialog box, click Licenses.

   The Licenses wizard displays the Office 365 licenses, for example Office 365 Business Essentials and Business Premium licenses, that are available and assigned to the user.

6. Click the drop-down arrow corresponding to the available licenses.

   The products that are included and assigned to the user in the license are displayed.

7. Select or de-select the check box corresponding to the product included in the license that needs to be enabled or removed for the user.
8. Click Save.

Assign Office 365 licenses to new hybrid users

Update Office 365 licenses display names

To update the names of the licenses displayed on Azure properties -> Licenses page of a hybrid user

1. On the system running the Active roles Service, go to ..\One Identity\Active Roles\7.2\Service\AzureLicenses.xml..
2. Open the xml file and edit the required SKU with the new license display name.

The updated licenses display names can be viewed on the User Azure Properties->Licenses wizard.

Update Office 365 licenses display names

To update the names of the licenses displayed on Azure properties -> Licenses page of a hybrid user

1. On the system running the Active roles Service, go to ..\One Identity\Active Roles\7.2\Service\AzureLicenses.xml..
2. Open the xml file and edit the required SKU with the new license display name.

The updated licenses display names can be viewed on the User Azure Properties->Licenses wizard.

Office 365 Granular license Management

Office 365 Granular user license management

Office 365 license assignment to Azure AD users is controlled or restricted by creating a new provisioning policy and applying the policy to the Organizational Unit.

To create and apply the new policy

1. From the Active Roles Console, create a Policy Object. For instructions on creating a policy object, see the section Creating a Policy Object, in the Active Roles Administrator Guide.

2. From the Web interface, assign or modify the Office 365 license for an Azure AD User.

The Policy is triggered for any Azure AD user in the Organization Unit for which the Office 365 License Management policy is applied.

If the policy conditions are not satisfied while assigning or modifying Azure AD User licenses, the following policy violation error is displayed:

Provisioning policy failure. The Office365 License Management policy encountered an error. Excepton in Office365 License Management Policy violation: The Azure user License(s) O365_BUSINESS_ESSENTIALS-INTUNE_O365, can be assigned. The policy prescribes that this Azure User requires only the specified license in the policy object to be assigned.

3. To check for policy violations, access the object in the Active Roles Console, right-click and click Check Policy.

   For a container object, this displays the Check Policy dialog box.

4. Review the options in the Check Policy dialog box and click OK.

   The Policy Check Results window is displayed.